last executing test programs: 1m13.810389367s ago: executing program 0 (id=447): r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) setreuid(0xee01, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r2 = dup(r0) write$cgroup_subtree(r2, &(0x7f00000001c0)=ANY=[], 0x32600) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) 1m13.516218344s ago: executing program 0 (id=450): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x321081a, &(0x7f00000005c0)={[{@minixdf}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000000b00)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==") socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) msgctl$MSG_STAT_ANY(0x0, 0xd, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) waitid(0x2, r3, &(0x7f00000000c0), 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f0000000140)='2', 0x1, 0x8080c61) timer_create(0x4, &(0x7f0000000000)={0x0, 0x3d, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000080)=0x0) timer_getoverrun(r5) 1m9.742624545s ago: executing program 0 (id=453): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111660000000000850000000300000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 1m8.196393062s ago: executing program 0 (id=461): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x1060, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 1m7.202015476s ago: executing program 0 (id=466): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0x601, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) 1m7.201715936s ago: executing program 2 (id=467): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0xff, 0x7fff0003}]}) setreuid(0xffffffffffffffff, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x40, &(0x7f0000000100)={[], [{@subj_role={'subj_role', 0x3d, 'xfrm0\x00'}}, {@measure}, {@subj_role={'subj_role', 0x3d, '!'}}, {@obj_user={'obj_user', 0x3d, '$,$}+%\\!'}}, {@obj_user}, {@fowner_gt}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x5d, 0x30, 0x32, 0x34, 0x64, 0x39, 0x31], 0x2d, [0x36, 0x36, 0x66, 0x33], 0x2d, [0x34, 0x65, 0x30, 0x63], 0x2d, [0x38, 0x66, 0x62, 0x36], 0x2d, [0x62, 0x61, 0x65, 0x31, 0x64, 0x64, 0x35, 0x39]}}}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) socket(0x2, 0x80805, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x5, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f0000000240)="b6", 0x1, 0x200080c1, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x1000008}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x3) shutdown(r3, 0x1) fanotify_mark(0xffffffffffffffff, 0x51, 0x10, 0xffffffffffffffff, 0x0) 1m4.364931574s ago: executing program 2 (id=469): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000600)={0x2, 0x6bb, @loopback}, 0x10) listen(r0, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000700)={0x2, 0x3039, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000800)={0x2, 0x6bb, @loopback}, 0x10) r2 = accept$inet(r0, 0x0, 0x0) write(r1, &(0x7f0000000900)="009c00011a2b3c4d00010000010000000000000300000003000000016c6f63616c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c696e757800"/171, 0xab) write(r2, &(0x7f0000000a00)="009c00011a2b3c4d00020000010001000000000300000003000000016c6f63616c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c696e757800"/172, 0x9c) 1m4.11473108s ago: executing program 2 (id=471): r0 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x2}, 0x1) 1m3.898464005s ago: executing program 2 (id=474): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x95e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@jqfmt_vfsv0}, {@quota}, {@grpid}, {@oldalloc}]}, 0x3, 0x44d, &(0x7f0000000ec0)="$eJzs28tvG8UfAPDvrpP219cvoZRHH0CgICIeSZMW6IEDIJA4gITEpRxDklalboOaINGqgoBQOaJK3BFHJP4CTnBBwAmJK9xRpQrlQuFktPZu/IjtJsGJS/35SNvM7I498/Xs2LM73QAG1lj2TxKxNyJ+jYiRWra5wFjtz82VK7N/rVyZTaJSefOPpFruz5Urs0XR4nV78sx4GpF+ksThNvUuXrp8bqZcnr+Y5yeXzr87uXjp8tNnz8+cmT8zf2H65MkTx6eee3b6mZ7EeVfW1kMfLBw5+Opb116fPXXt7R+/Tor4W+LokbFuBx+rVHpcXX/ta0gnQ31sCBtSioisu4ar438kSlHvvJF45eO+Ng7YUpVch8PLFeAOlkS/WwD0R/FDn13/Ftv2zT7678aLtQugLO6b+VY7MhRp1C6Mhluub3tpLCJOLf/9RbbF1tyHAABo8m02/3mq3fwvjXsbyv0/XxsazddS9kfE3RFxICLuiaiWvS8i7t9g/a2LJGvnP+n1TQW2Ttn87/l8bat5/pcWRUZLeW5fNTOcnD5bnj+WfybjMbwzy091qeO7l3/5rNOxxvlftmX1F3PBvB3Xh3Y2v2ZuZmnm38Tc6MZHEYeG2sWfrK4EJBFxMCIObbKOs098daTTsdb4K0m3d3qhOduDdabKlxGP1/p/OVriLyTd1ycn/xfl+WOTxVmx1k8/X32jU/237v+tlfX/7rbn/2r8o0njeu3ixuu4+tunHa9pJjZ1/td37Mj/vj+ztHRxKmJH8lqt0Y37p+uvLfJF+Sz+8aPtx//+qH8ShyMiO4kfiIgHI+KhvO8ejohHIuJol/h/eOnRdzodux36f66l/0ebi7T0fz2xI1r3tE+Uzn3/TfM71pPr+/47UU2N53vW8/23nnZt7mwGAACA/540IvZGkk6sptN0YqL2f/gPxO60vLC49OTphfcuzNWeERiN4bS401W7H1y7HzqVX9YX+emW/PH8vvHnpV3V/MTsQnmu38HDgNvTYfxnfi/1u3XAlvO8Fgwu4x8Gl/EPg8v4h8HVZvzv6kc7gO3X7vf/w3qyMrKdjQG2Vcv4t+wHA8T1Pwwu4x8GV+P47/r8PXAnWdwVt35IXkJiTSLS26IZvUkkWzwK9vY7wI0n+v3NBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Bv/BAAA///oO+WP") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m3.878440446s ago: executing program 0 (id=476): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)="20e0995b99cd118978e66a21", 0xc) 1m3.512116124s ago: executing program 32 (id=476): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)="20e0995b99cd118978e66a21", 0xc) 58.894864405s ago: executing program 2 (id=483): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) read$FUSE(r1, &(0x7f0000004500)={0x2020}, 0xfffffe0c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, 0x0, 0x0) listen(0xffffffffffffffff, 0x3) fcntl$lock(r0, 0x5, 0x0) 58.111451194s ago: executing program 2 (id=489): r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) setreuid(0xee01, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r2 = dup(r0) write$cgroup_subtree(r2, &(0x7f00000001c0)=ANY=[], 0x32600) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) 57.584266727s ago: executing program 33 (id=489): r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) setreuid(0xee01, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r2 = dup(r0) write$cgroup_subtree(r2, &(0x7f00000001c0)=ANY=[], 0x32600) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) 26.394739946s ago: executing program 3 (id=587): socket$kcm(0x10, 0x2, 0x0) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x22) set_mempolicy(0x3, &(0x7f0000000000)=0x80000000007, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='btrfs\x00', 0x0, 0x0) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x3) write$cgroup_subtree(r0, &(0x7f0000000740)=ANY=[], 0xfe33) 23.881129787s ago: executing program 3 (id=590): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8008}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x18}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 22.618688977s ago: executing program 3 (id=592): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000000090bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad640200000000004504faff0100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000042000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f01000000010000006e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b98d2de10c21d3ea02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d000000200008000000000000001abc11c800000000000000000000000928ee53595a779d243a48cea769470424d20a04c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e495f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e4a48dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f00000021f8547d393dabe616fbbde21c90be00b5a22671395c7a69c6dd4d022ffc97ddb6aa025131652d409da1d8cfc3d219d4b1c1b7b8170d7c33d91db2b73f7ae02485a209a2474b5d0790d05c01bec623056e4d3f4d3149373a28b26a15a1fcce73d57e6eaf7e6f315fe275ebc9ef7aeca277dde01dde724f419803a2172a7833ceab38d21ca4f1dea5e1f4d8824167b21dd289dd4e6ecfba9e163bdbc48e1e758ecde05c10809c9edfa6d77c652fd742e6dad13d2a397bebe3ea8bc087d3720e2202f36c7719ae34f042e19dc08a3323a3d94098a7ec171469352bab1662c3e4d4803c565cfcce32dad628fade43a4844abb230ce608726fd87e93c405a96cf638c41510f26e9da5f316"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) 21.503094413s ago: executing program 3 (id=595): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x7fffffff, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040840) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xffe2}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000300)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0) 17.642285366s ago: executing program 3 (id=609): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000006800e97800000000fff9df250a0000000000000008000500", @ANYRES32=r2], 0x20}}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x3, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000540001050000000000c4000007", @ANYRES32, @ANYBLOB="00000001e0000300"/19], 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 16.24905618s ago: executing program 3 (id=614): socket$kcm(0x10, 0x2, 0x0) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x22) set_mempolicy(0x3, &(0x7f0000000000)=0x80000000007, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='btrfs\x00', 0x0, 0x0) io_setup(0x2004, &(0x7f0000000680)) r5 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x81, 0x0) pwritev(r5, 0x0, 0x0, 0x8, 0x3) write$cgroup_subtree(r0, &(0x7f0000000740)=ANY=[], 0xfe33) 11.294075099s ago: executing program 4 (id=626): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x15, 0x3, 'sed\x00', 0x19, 0x4, 0x10072}, 0x2c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000140)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e21, 0x3, 'lc\x00', 0x2, 0x7, 0x37}, {@remote, 0x4e23, 0x10000, 0xc3, 0x12d5c, 0x12d58}}, 0x44) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv4/conf/all/accept_local\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='1', 0x1) connect(0xffffffffffffffff, &(0x7f0000000400)=@in={0x2, 0x1122, @loopback}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000480)={@local, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x84, 0x0, @loopback, @loopback}, "1122334400000000000000000a000040"}}}}, 0x0) 11.135508803s ago: executing program 4 (id=629): socket$nl_netfilter(0x10, 0x3, 0xc) add_key$user(0x0, 0x0, &(0x7f00000021c0), 0x0, 0xfffffffffffffffe) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) shutdown(r0, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) recvmmsg(r3, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) 10.570926976s ago: executing program 5 (id=631): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20b02, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x841fa2e66efa8cfe) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x1, 0x8, 0xb01, 0x0, 0x0, {0x3, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x400c091}, 0x4) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$uinput_user_dev(r4, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2181) r5 = socket$inet_udp(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r6, 0x4b68, 0x0) ioctl$PIO_SCRNMAP(r6, 0x4b41, &(0x7f0000000140)) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) 9.770121405s ago: executing program 5 (id=633): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x321081a, &(0x7f00000005c0)={[{@minixdf}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000000b00)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==") socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) msgctl$MSG_STAT_ANY(0x0, 0xd, 0xfffffffffffffffe) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f0000000140)='2', 0x1, 0x8080c61) timer_create(0x4, &(0x7f0000000000)={0x0, 0x3d, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000080)=0x0) timer_getoverrun(r5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x4f000, 0x100000001}) 9.390416865s ago: executing program 1 (id=634): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0200000001000700000000000400020000000000100002000000000020"], 0x24, 0x0) listxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)=""/18, 0x12) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90) write(r0, &(0x7f0000000180)="20e0995b99cd118978e66a2103a93588", 0x1) 8.091976126s ago: executing program 1 (id=635): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0x0}, 0x50) sendmsg$NFC_CMD_DISABLE_SE(0xffffffffffffffff, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setns(0xc9, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r4, &(0x7f0000000640)=[{&(0x7f0000000480)=""/179, 0xb3}], 0x1, 0x4f, 0x0) 7.189776487s ago: executing program 5 (id=638): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$clear(0x7, 0x0) 6.6629301s ago: executing program 1 (id=639): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x5, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x20}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r0}, 0x38) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000000)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001800500010003000000060004000a0a0000060005000a0a0000"], 0xbc}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r2, &(0x7f0000000600)={0x2, 0x6bb, @loopback}, 0x10) listen(r2, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r3, &(0x7f0000000700)={0x2, 0x3039, @loopback}, 0x10) connect$inet(r3, &(0x7f0000000800)={0x2, 0x6bb, @loopback}, 0x10) r4 = accept$inet(r2, 0x0, 0x0) write(r4, &(0x7f0000000a00)="009c00011a2b3c4d00020000010001000000000300000003000000016c6f63616c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c696e757800"/172, 0x9c) write(r3, &(0x7f0000000b00)="00a800011a2b3c4d00070000000100010000012c05f5e1000000000300000003004000"/168, 0xa8) 6.094472314s ago: executing program 6 (id=641): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c091}, 0x4) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$uinput_user_dev(r3, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r5, 0x4b68, 0x0) ioctl$PIO_SCRNMAP(r5, 0x4b41, &(0x7f0000000140)) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) 5.391168321s ago: executing program 4 (id=642): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./dev\x00', &(0x7f0000000380)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev/nullb1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000001000)="53464f5a097d828300"/4096, 0x1000, 0x0) close(r0) 5.301688133s ago: executing program 1 (id=643): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20b02, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x841fa2e66efa8cfe) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x1, 0x8, 0xb01, 0x0, 0x0, {0x3, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x400c091}, 0x4) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$uinput_user_dev(r4, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2181) r5 = socket$inet_udp(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r6, 0x4b68, 0x0) ioctl$PIO_SCRNMAP(r6, 0x4b41, &(0x7f0000000140)) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) 5.094494618s ago: executing program 5 (id=644): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) prlimit64(r0, 0x5, &(0x7f0000000000)={0x4, 0xb}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r3, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 4.840450144s ago: executing program 6 (id=645): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x89, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f086dd1be0ffff00fe3321632f77fbac14140be000031762079f4b200287e5feca6aab845013f2325f1a393b050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = dup3(r0, r1, 0x0) ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f0000000180)) 4.622944859s ago: executing program 4 (id=646): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0xff, 0x7fff0003}]}) setreuid(0xffffffffffffffff, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x40, &(0x7f0000000100)={[], [{@subj_role={'subj_role', 0x3d, 'xfrm0\x00'}}, {@measure}, {@subj_role={'subj_role', 0x3d, '!'}}, {@obj_user={'obj_user', 0x3d, '$,$}+%\\!'}}, {@obj_user}, {@fowner_gt}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x5d, 0x30, 0x32, 0x34, 0x64, 0x39, 0x31], 0x2d, [0x36, 0x36, 0x66, 0x33], 0x2d, [0x34, 0x65, 0x30, 0x63], 0x2d, [0x38, 0x66, 0x62, 0x36], 0x2d, [0x62, 0x61, 0x65, 0x31, 0x64, 0x64, 0x35, 0x39]}}}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0) socket(0x2, 0x80805, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)="b6", 0x1, 0x200080c1, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x1000008}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x3) shutdown(0xffffffffffffffff, 0x1) fanotify_mark(0xffffffffffffffff, 0x51, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 4.308953247s ago: executing program 6 (id=647): set_mempolicy(0x8006, &(0x7f0000000040)=0x1003, 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) 3.486165066s ago: executing program 1 (id=648): socket$nl_netfilter(0x10, 0x3, 0xc) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x23, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001000010700930000ffffffff0a000000060001001000000008000a00", @ANYRES32=r1], 0x24}}, 0x24008000) 3.138590345s ago: executing program 6 (id=649): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x321081a, &(0x7f00000005c0)={[{@minixdf}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000000b00)="$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") socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) msgctl$MSG_STAT_ANY(0x0, 0xd, 0xfffffffffffffffe) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f0000000140)='2', 0x1, 0x8080c61) timer_create(0x4, &(0x7f0000000000)={0x0, 0x3d, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000080)=0x0) timer_getoverrun(r5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x4f000, 0x100000001}) 2.50253536s ago: executing program 4 (id=650): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0x0}, 0x50) sendmsg$NFC_CMD_DISABLE_SE(0xffffffffffffffff, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setns(0xc9, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r4, &(0x7f0000000640)=[{&(0x7f0000000480)=""/179, 0xb3}], 0x1, 0x4f, 0x0) 2.07863264s ago: executing program 5 (id=651): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @local}, @in6={0xa, 0x0, 0xfffffffc, @loopback, 0xc7f}], 0x2c) sendto$inet6(r5, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) recvmmsg(r5, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/21, 0x15}, 0x1ff}], 0x4000000000001bf, 0x40000023, 0x0) ioctl$UDMABUF_CREATE_LIST(r4, 0x40087543, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000200", @ANYRES32, @ANYBLOB]) socket$inet_mptcp(0x2, 0x1, 0x106) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) 1.854542416s ago: executing program 1 (id=652): socket$nl_netfilter(0x10, 0x3, 0xc) add_key$user(0x0, 0x0, &(0x7f00000021c0), 0x0, 0xfffffffffffffffe) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) shutdown(r0, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) recvmmsg(r3, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) 811.21015ms ago: executing program 34 (id=614): socket$kcm(0x10, 0x2, 0x0) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x22) set_mempolicy(0x3, &(0x7f0000000000)=0x80000000007, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='btrfs\x00', 0x0, 0x0) io_setup(0x2004, &(0x7f0000000680)) r5 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x81, 0x0) pwritev(r5, 0x0, 0x0, 0x8, 0x3) write$cgroup_subtree(r0, &(0x7f0000000740)=ANY=[], 0xfe33) 801.964811ms ago: executing program 4 (id=654): openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev_mnt\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev_mnt/ubi0\x00', 0x2, 0x0) ioctl(r0, 0x40046f05, 0x0) 795.915501ms ago: executing program 6 (id=655): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c091}, 0x4) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$uinput_user_dev(r3, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r5, 0x4b68, 0x0) ioctl$PIO_SCRNMAP(r5, 0x4b41, &(0x7f0000000140)) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) 682.264624ms ago: executing program 5 (id=656): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x50, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x81}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x2}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) syz_genetlink_get_family_id$tipc(0x0, r2) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 0s ago: executing program 6 (id=657): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@multicast1, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x4}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfc, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.71' (ED25519) to the list of known hosts. [ 62.896589][ T4174] cgroup: Unknown subsys name 'net' [ 63.033890][ T4174] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.586604][ T4174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 66.136469][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 66.189049][ T4200] chnl_net:caif_netlink_parms(): no params data found [ 66.227138][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 66.302356][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.310598][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.320051][ T4191] device bridge_slave_0 entered promiscuous mode [ 66.345270][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.352523][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.361145][ T4191] device bridge_slave_1 entered promiscuous mode [ 66.375639][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 66.438887][ T4200] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.446071][ T4200] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.454622][ T4200] device bridge_slave_0 entered promiscuous mode [ 66.472361][ T4200] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.479588][ T4200] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.487791][ T4200] device bridge_slave_1 entered promiscuous mode [ 66.513345][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.522663][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 66.533261][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.542218][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.550780][ T4192] device bridge_slave_0 entered promiscuous mode [ 66.570298][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.590517][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.598186][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.606368][ T4192] device bridge_slave_1 entered promiscuous mode [ 66.615299][ T4200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.628057][ T4200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.685080][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.703841][ T4191] team0: Port device team_slave_0 added [ 66.723087][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.732440][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.740757][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.749178][ T4187] device bridge_slave_0 entered promiscuous mode [ 66.758172][ T4191] team0: Port device team_slave_1 added [ 66.766826][ T4200] team0: Port device team_slave_0 added [ 66.784813][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.792113][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.800651][ T4187] device bridge_slave_1 entered promiscuous mode [ 66.822498][ T4200] team0: Port device team_slave_1 added [ 66.860401][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.885122][ T4192] team0: Port device team_slave_0 added [ 66.892265][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.899942][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.926071][ T4200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.939466][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.946445][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.972934][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.986109][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.003497][ T4192] team0: Port device team_slave_1 added [ 67.009897][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.016872][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.042900][ T4200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.054668][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.062148][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.088492][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.106135][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.113322][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.121540][ T4193] device bridge_slave_0 entered promiscuous mode [ 67.157274][ T4187] team0: Port device team_slave_0 added [ 67.163749][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.171007][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.179344][ T4193] device bridge_slave_1 entered promiscuous mode [ 67.195177][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.202450][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.228540][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.254194][ T4187] team0: Port device team_slave_1 added [ 67.273776][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.281026][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.307507][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.345892][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.353083][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.379484][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.405815][ T4191] device hsr_slave_0 entered promiscuous mode [ 67.412991][ T4191] device hsr_slave_1 entered promiscuous mode [ 67.423375][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.433258][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.441433][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.467556][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.488197][ T4200] device hsr_slave_0 entered promiscuous mode [ 67.495136][ T4200] device hsr_slave_1 entered promiscuous mode [ 67.505424][ T4200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.513401][ T4200] Cannot create hsr debugfs directory [ 67.525671][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.557484][ T4193] team0: Port device team_slave_0 added [ 67.592436][ T4193] team0: Port device team_slave_1 added [ 67.634714][ T4192] device hsr_slave_0 entered promiscuous mode [ 67.641584][ T4192] device hsr_slave_1 entered promiscuous mode [ 67.649450][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.657051][ T4192] Cannot create hsr debugfs directory [ 67.666038][ T4187] device hsr_slave_0 entered promiscuous mode [ 67.672769][ T4187] device hsr_slave_1 entered promiscuous mode [ 67.679826][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.687777][ T4187] Cannot create hsr debugfs directory [ 67.744491][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.751699][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.778222][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.820337][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.827775][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.853880][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.868645][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 67.880808][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 67.886947][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 67.893497][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 67.899922][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 68.024579][ T4193] device hsr_slave_0 entered promiscuous mode [ 68.031848][ T4193] device hsr_slave_1 entered promiscuous mode [ 68.039086][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.046674][ T4193] Cannot create hsr debugfs directory [ 68.170149][ T4191] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.195654][ T4191] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.211456][ T4191] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.225204][ T4191] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.284463][ T4200] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.301910][ T4200] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.323133][ T4200] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.344387][ T4200] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.383085][ T4187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.393619][ T4187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.419546][ T4187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.446385][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.458287][ T4187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.496651][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.508456][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.519608][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.526514][ T4192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.558513][ T4192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.584538][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.593698][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.604400][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.611836][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.621797][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.633195][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.642033][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.649175][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.657092][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.669585][ T4192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.684032][ T4192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.715566][ T4200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.736085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.746030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.754831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.779670][ T4200] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.800130][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.813714][ T4193] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.827249][ T4193] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.841393][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.851945][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.861574][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.868727][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.887222][ T4191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.898978][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.924891][ T4193] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.956297][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.966814][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.983405][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.994258][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.005511][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.015820][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.024510][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.034389][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.043722][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.052427][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.061558][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.070419][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.077558][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.085658][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.094646][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.103669][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.112563][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.121170][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.131022][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.141415][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.149594][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.157752][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.173054][ T4193] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.192490][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.202993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.216558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.232588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.243388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.261224][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.297626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.313441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.342495][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.366491][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.382176][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.404985][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.425484][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.436716][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.453236][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.463515][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.470673][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.479185][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.488309][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.496845][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.504028][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.512777][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.523142][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.557196][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.579965][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.589104][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.597051][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.610944][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.620673][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.657142][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.669855][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.689666][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.698321][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.707101][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.719498][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.728811][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.737374][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.744536][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.753436][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.763011][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.771734][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.778875][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.786746][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.797087][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.806204][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.814951][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.824390][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.833727][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.842347][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.855197][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.864462][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.875137][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.909522][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.921504][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.930915][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.939230][ T4176] Bluetooth: hci1: command 0x041b tx timeout [ 69.945476][ T4176] Bluetooth: hci2: command 0x041b tx timeout [ 69.952728][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.960765][ T4176] Bluetooth: hci4: command 0x041b tx timeout [ 69.964702][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.966993][ T4176] Bluetooth: hci0: command 0x041b tx timeout [ 69.981133][ T4176] Bluetooth: hci3: command 0x041b tx timeout [ 69.988617][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.996990][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.005870][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.031243][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.050812][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.066234][ T4191] device veth0_vlan entered promiscuous mode [ 70.079567][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.088416][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.096493][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.105407][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.115662][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.132136][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.142824][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.158880][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.181976][ T4191] device veth1_vlan entered promiscuous mode [ 70.213407][ T4200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.230506][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.261147][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.298519][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.318250][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.334617][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.352383][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.361541][ T1470] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.368718][ T1470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.377979][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.418772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.431786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.448258][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.457122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.473297][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.480480][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.494455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.503855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.520653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.533018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.548755][ T4191] device veth0_macvtap entered promiscuous mode [ 70.570879][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.603069][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.621152][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.639351][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.660156][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.669663][ T4191] device veth1_macvtap entered promiscuous mode [ 70.703199][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.712547][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.722236][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.731213][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.739925][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.749267][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.776878][ T4193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.788129][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.811285][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.822768][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.832945][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.848892][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.863845][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.873941][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.887642][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.896622][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.914552][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.926684][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.961572][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.979184][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.992688][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.013086][ T4192] device veth0_vlan entered promiscuous mode [ 71.029257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.045625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.054892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.064166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.074245][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.083172][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.091959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.101016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.110149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.118262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.126165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.134527][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.157211][ T4187] device veth0_vlan entered promiscuous mode [ 71.166058][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.176322][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.185755][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.194913][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.212971][ T4192] device veth1_vlan entered promiscuous mode [ 71.242759][ T4200] device veth0_vlan entered promiscuous mode [ 71.281964][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.291878][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.303906][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.312804][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.323079][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.331315][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.339819][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.347309][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.358625][ T4187] device veth1_vlan entered promiscuous mode [ 71.381672][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.388327][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.397178][ T4200] device veth1_vlan entered promiscuous mode [ 71.422720][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.441209][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.451564][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.490099][ T4192] device veth0_macvtap entered promiscuous mode [ 71.509767][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.519144][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.528468][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.540396][ T4200] device veth0_macvtap entered promiscuous mode [ 71.552340][ T4200] device veth1_macvtap entered promiscuous mode [ 71.571064][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.580179][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.593166][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.602288][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.627065][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.643114][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.655404][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.666557][ T4187] device veth0_macvtap entered promiscuous mode [ 71.689560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.699343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.708443][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.717147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.726288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.747940][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.759097][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.771545][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.786193][ T4192] device veth1_macvtap entered promiscuous mode [ 71.799699][ T4187] device veth1_macvtap entered promiscuous mode [ 71.806944][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.817154][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.825750][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.835254][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.847121][ T4200] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.851983][ T1470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.868827][ T1470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.878282][ T4200] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.887028][ T4200] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.896152][ T4200] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.921444][ T4193] device veth0_vlan entered promiscuous mode [ 71.934274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.945323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.955023][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.964144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.974798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.013078][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.024465][ T4263] Bluetooth: hci3: command 0x040f tx timeout [ 72.026548][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.038237][ T4263] Bluetooth: hci0: command 0x040f tx timeout [ 72.046970][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.056862][ T4263] Bluetooth: hci4: command 0x040f tx timeout [ 72.059279][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.064337][ T4263] Bluetooth: hci2: command 0x040f tx timeout [ 72.079747][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.093255][ T1470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.093754][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.104385][ T1470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.120085][ T4263] Bluetooth: hci1: command 0x040f tx timeout [ 72.134331][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.149629][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.160675][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.170763][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.182918][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.194611][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.202790][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.212044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.221476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.229747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.239623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.263913][ T4193] device veth1_vlan entered promiscuous mode [ 72.274473][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.288977][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.299392][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.309957][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.321746][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.349285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.361340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.373328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.383021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.395948][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.410363][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.428834][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.444302][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.455617][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.466460][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.479335][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.501729][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.515332][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.524884][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.535048][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.546412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.556842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.569433][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.586549][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.600644][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.616410][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.636288][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.656901][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.711564][ T1470] Bluetooth: hci5: Frame reassembly failed (-84) [ 72.744593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.765134][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.774299][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.804621][ T4193] device veth0_macvtap entered promiscuous mode [ 72.815767][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.832353][ T4193] device veth1_macvtap entered promiscuous mode [ 72.840134][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.881810][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.891275][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.901571][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.961139][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.977364][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.989516][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.000567][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.010859][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.021694][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.032123][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.043040][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.054903][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.078071][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.086454][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.101388][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.114808][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.124455][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.133430][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.142739][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.152199][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.174018][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.199137][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.222506][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.234638][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.245331][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.256104][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.273707][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.286845][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.316217][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.385507][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.400512][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.488505][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.497352][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.508784][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.605868][ T4274] fuse: Unknown parameter '0xffffffffffffffff' [ 75.187395][ C1] sched: RT throttling activated [ 75.213243][ T4229] Bluetooth: hci4: command 0x0419 tx timeout [ 75.220282][ T4229] Bluetooth: hci0: command 0x0419 tx timeout [ 75.226376][ T4229] Bluetooth: hci3: command 0x0419 tx timeout [ 75.233511][ T4193] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.249199][ T4193] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.263806][ T4193] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.273076][ T4193] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.314835][ T1470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.345577][ T1470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.424399][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.446509][ T4229] Bluetooth: hci1: command 0x0419 tx timeout [ 75.452937][ T4229] Bluetooth: hci2: command 0x0419 tx timeout [ 75.459407][ T23] Bluetooth: hci5: command 0x1003 tx timeout [ 75.467352][ T4194] Bluetooth: hci5: sending frame failed (-49) [ 75.581908][ T2284] input: syz0 as /devices/virtual/misc/uhid/0002:0001:0002.0001/input/input5 [ 75.602506][ T4279] loop4: detected capacity change from 0 to 1024 [ 75.652121][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.652493][ T4279] EXT4-fs (loop4): Unrecognized mount option "smackfsdef=hash" or missing value [ 75.674955][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.683382][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.717588][ T2284] hid-generic 0002:0001:0002.0001: input,hidraw0: HID v0.01 Mouse [syz0] on syz0 [ 75.772670][ T4250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.792917][ T4250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.834442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.653664][ T4295] loop2: detected capacity change from 0 to 512 [ 76.691416][ T4290] fido_id[4290]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 76.723020][ T4295] EXT4-fs (loop2): Ignoring removed nobh option [ 76.736298][ T4295] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 76.750018][ T4297] loop0: detected capacity change from 0 to 8 [ 76.797552][ T4295] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 76.889000][ T4295] EXT4-fs (loop2): 1 truncate cleaned up [ 76.894722][ T4295] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 77.674601][ T4229] Bluetooth: hci5: command 0x1001 tx timeout [ 78.156966][ T4297] SQUASHFS error: zlib decompression failed, data probably corrupt [ 78.185888][ T4194] Bluetooth: hci5: sending frame failed (-49) [ 78.192619][ T26] audit: type=1326 audit(1787091961.187:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4305 comm="syz.1.11" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f35ef90d9 code=0x7fc00000 [ 78.220424][ T4297] SQUASHFS error: Failed to read block 0x4e8: -5 [ 78.311121][ T4297] SQUASHFS error: zlib decompression failed, data probably corrupt [ 78.368972][ T4297] SQUASHFS error: Failed to read block 0x4ee: -5 [ 78.432767][ T26] audit: type=1800 audit(1787091961.487:3): pid=4297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.9" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 78.629178][ T4322] syz.0.14 uses obsolete (PF_INET,SOCK_PACKET) [ 78.671983][ T4325] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 78.699383][ T4322] wlan1 speed is unknown, defaulting to 1000 [ 78.705722][ T4322] wlan1 speed is unknown, defaulting to 1000 [ 78.780183][ T4322] wlan1 speed is unknown, defaulting to 1000 [ 78.980405][ T4322] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 79.009753][ T4322] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 79.954402][ T4322] wlan1 speed is unknown, defaulting to 1000 [ 80.148069][ T4322] wlan1 speed is unknown, defaulting to 1000 [ 80.176857][ T4322] wlan1 speed is unknown, defaulting to 1000 [ 80.190411][ T4322] wlan1 speed is unknown, defaulting to 1000 [ 80.205171][ T4322] wlan1 speed is unknown, defaulting to 1000 [ 80.257674][ T4234] Bluetooth: hci5: command 0x1009 tx timeout [ 80.326639][ T4354] loop0: detected capacity change from 0 to 512 [ 80.392083][ T4354] EXT4-fs (loop0): orphan cleanup on readonly fs [ 80.435043][ T4354] EXT4-fs (loop0): 1 orphan inode deleted [ 80.445865][ T4354] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 80.665440][ T4359] device syzkaller0 entered promiscuous mode [ 81.241844][ T4366] loop1: detected capacity change from 0 to 1024 [ 82.013683][ T4369] loop2: detected capacity change from 0 to 512 [ 82.037215][ T4371] loop4: detected capacity change from 0 to 512 [ 82.261937][ T4371] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 82.338362][ T4369] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 82.358184][ T4371] EXT4-fs (loop4): 1 truncate cleaned up [ 82.363904][ T4371] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,errors=remount-ro,data=journal,usrjquota=,init_itable=0x0000000000000022,. Quota mode: none. [ 82.384684][ T4366] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: none. [ 82.442230][ T4369] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.291244][ T4369] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 83.369621][ T4382] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 83.451823][ T4369] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 83.527548][ T4369] EXT4-fs (loop2): This should not happen!! Data will be lost [ 83.527548][ T4369] [ 83.537270][ T4369] EXT4-fs (loop2): Total free blocks count 0 [ 83.566048][ T4369] EXT4-fs (loop2): Free/Dirty block details [ 83.581433][ T4369] EXT4-fs (loop2): free_blocks=65280 [ 83.588407][ T4369] EXT4-fs (loop2): dirty_blocks=33 [ 83.593675][ T4369] EXT4-fs (loop2): Block reservation details [ 83.614814][ T4369] EXT4-fs (loop2): i_reserved_data_blocks=33 [ 83.736434][ T4390] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 84.363885][ T4407] loop2: detected capacity change from 0 to 128 [ 84.551134][ T4407] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 84.561941][ T4407] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 85.590669][ T4432] loop4: detected capacity change from 0 to 512 [ 87.192481][ T1109] cfg80211: failed to load regulatory.db [ 87.200541][ T4432] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 87.380478][ T26] audit: type=1804 audit(1787091970.417:4): pid=4432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.43" name="/newroot/12/file0/bus" dev="loop4" ino=1048590 res=1 errno=0 [ 87.632065][ T4442] loop3: detected capacity change from 0 to 256 [ 88.216281][ T4448] Zero length message leads to an empty skb [ 89.415198][ T4458] scsi_nl_rcv_msg: Msgtype 1 failed - err -3 [ 90.167488][ T4472] loop3: detected capacity change from 0 to 256 [ 90.208256][ T4470] loop0: detected capacity change from 0 to 128 [ 90.377039][ T4470] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 90.387891][ T4470] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 90.593791][ T4482] rnbd_client L211: map_device: Parameters missing [ 93.515803][ T4514] 9pnet: Insufficient options for proto=fd [ 93.649309][ T4516] loop3: detected capacity change from 0 to 128 [ 93.725078][ T4516] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 93.735936][ T4516] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 93.772880][ T4516] rnbd_client L211: map_device: Parameters missing [ 93.958065][ T4532] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 94.042572][ T4537] loop4: detected capacity change from 0 to 128 [ 94.561844][ T4537] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 94.634850][ T4537] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 94.720912][ T4545] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 94.797546][ T4547] loop0: detected capacity change from 0 to 256 [ 94.862711][ T4547] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 95.970594][ T4560] loop0: detected capacity change from 0 to 128 [ 96.070175][ T4560] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 96.087749][ T4560] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 96.111105][ T4568] netlink: 'syz.3.91': attribute type 1 has an invalid length. [ 96.418862][ T4570] overlayfs: missing 'lowerdir' [ 96.852117][ T4575] loop1: detected capacity change from 0 to 512 [ 97.110165][ T4581] loop4: detected capacity change from 0 to 4096 [ 97.127071][ T4575] EXT4-fs (loop1): 1 truncate cleaned up [ 97.133387][ T4577] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 97.145252][ T4575] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,jqfmt=vfsv1,noload,errors=remount-ro,usrjquota=,. Quota mode: none. [ 97.166532][ T4577] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 97.172134][ T4581] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 97.212955][ T4586] loop0: detected capacity change from 0 to 512 [ 97.250525][ T4581] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,quota,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 97.281451][ T4586] ======================================================= [ 97.281451][ T4586] WARNING: The mand mount option has been deprecated and [ 97.281451][ T4586] and is ignored by this kernel. Remove the mand [ 97.281451][ T4586] option from the mount to silence this warning. [ 97.281451][ T4586] ======================================================= [ 97.352768][ T4586] EXT4-fs (loop0): Ignoring removed oldalloc option [ 97.417488][ T4586] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 97.538123][ T4586] EXT4-fs (loop0): 1 orphan inode deleted [ 97.543940][ T4586] EXT4-fs (loop0): 1 truncate cleaned up [ 97.579078][ T4586] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,bsddf,nobarrier,jqfmt=vfsv0,quota,grpid,oldalloc,. Quota mode: writeback. [ 97.681400][ T4586] EXT4-fs error (device loop0): ext4_search_dir:1549: inode #12: block 7: comm syz.0.95: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 97.729837][ T4586] EXT4-fs (loop0): Remounting filesystem read-only [ 98.143981][ T4609] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 98.375988][ T4608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.533953][ T4618] loop1: detected capacity change from 0 to 128 [ 98.555246][ T4618] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 98.565968][ T4618] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 98.604083][ T4618] rnbd_client L211: map_device: Parameters missing [ 98.766754][ T4623] loop0: detected capacity change from 0 to 128 [ 98.815784][ T4623] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 98.827068][ T4623] ext4 filesystem being mounted at /22/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 99.172036][ T4631] rnbd_client L211: map_device: Parameters missing [ 99.921241][ T4645] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 100.033408][ T4650] loop2: detected capacity change from 0 to 512 [ 100.168116][ T4650] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.120: bg 0: block 5: invalid block bitmap [ 100.194452][ T4653] loop0: detected capacity change from 0 to 128 [ 100.213606][ T4650] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 100.223714][ T4650] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.120: invalid indirect mapped block 3 (level 2) [ 100.308841][ T4650] EXT4-fs (loop2): 1 orphan inode deleted [ 100.337998][ T4650] EXT4-fs (loop2): 1 truncate cleaned up [ 100.343714][ T4650] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 100.936837][ T4665] loop3: detected capacity change from 0 to 512 [ 100.990148][ T4653] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 101.001093][ T4653] ext4 filesystem being mounted at /24/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 101.035867][ T4653] rnbd_client L211: map_device: Parameters missing [ 101.189690][ T4665] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 101.232416][ T26] audit: type=1804 audit(1787091984.287:5): pid=4665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.125" name="/newroot/27/file0/bus" dev="loop3" ino=1048593 res=1 errno=0 [ 101.461390][ T4670] device sit0 entered promiscuous mode [ 101.473693][ T4670] netlink: 'syz.1.127': attribute type 1 has an invalid length. [ 101.481750][ T4670] netlink: 1 bytes leftover after parsing attributes in process `syz.1.127'. [ 101.620761][ T4679] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 101.714882][ T4684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.129'. [ 102.352478][ T4703] rnbd_client L211: map_device: Parameters missing [ 102.682593][ T4711] loop1: detected capacity change from 0 to 8 [ 102.735830][ T4713] usb usb1: usbfs: process 4713 (syz.0.141) did not claim interface 0 before use [ 102.783773][ T4713] usb usb1: usbfs: process 4713 (syz.0.141) did not claim interface 0 before use [ 102.934712][ T4711] SQUASHFS error: zlib decompression failed, data probably corrupt [ 102.994221][ T4711] SQUASHFS error: Failed to read block 0x9b: -5 [ 103.076155][ T4711] SQUASHFS error: Unable to read metadata cache entry [99] [ 103.179857][ T4711] SQUASHFS error: Unable to read inode 0x127 [ 106.671355][ T4760] loop3: detected capacity change from 0 to 2048 [ 107.560465][ T4770] loop0: detected capacity change from 0 to 1024 [ 107.595254][ T4760] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 107.631207][ T4770] EXT4-fs (loop0): Ignoring removed bh option [ 107.729404][ T4770] EXT4-fs (loop0): mounted filesystem without journal. Opts: auto_da_alloc,delalloc,barrier=0x0000000000000004,journal_ioprio=0x0000000000000006,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,abort,bh,init_itable,. Quota mode: none. [ 108.908830][ T4792] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 110.476333][ T4826] loop1: detected capacity change from 0 to 1024 [ 110.530236][ T4826] EXT4-fs (loop1): Mount option "dioread_lock" incompatible with ext3 [ 110.567979][ T4826] binder: 4825:4826 ioctl c0306201 2000000001c0 returned -14 [ 112.780913][ T4851] device syzkaller0 entered promiscuous mode [ 115.962509][ T4885] xt_hashlimit: overflow, try lower: 1125899906842624/134217732 [ 116.778180][ T4887] loop2: detected capacity change from 0 to 512 [ 116.873468][ T4887] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 117.784947][ T4887] EXT4-fs (loop2): 1 truncate cleaned up [ 117.807650][ T4887] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,. Quota mode: none. [ 117.950560][ T4896] loop3: detected capacity change from 0 to 128 [ 118.711881][ T4896] EXT4-fs (loop3): mounted filesystem without journal. Opts: data_err=ignore,,errors=continue. Quota mode: none. [ 118.843325][ T4896] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 119.016069][ T4911] loop0: detected capacity change from 0 to 256 [ 119.065074][ T4913] FAULT_INJECTION: forcing a failure. [ 119.065074][ T4913] name fail_futex, interval 1, probability 0, space 0, times 1 [ 119.103275][ T4913] CPU: 1 PID: 4913 Comm: syz.2.204 Not tainted syzkaller #0 [ 119.110660][ T4913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.120776][ T4913] Call Trace: [ 119.124084][ T4913] [ 119.127040][ T4913] dump_stack_lvl+0x188/0x250 [ 119.131766][ T4913] ? show_regs_print_info+0x20/0x20 [ 119.137011][ T4913] ? load_image+0x410/0x410 [ 119.141557][ T4913] ? cgroup_rstat_updated+0xce/0x350 [ 119.146883][ T4913] ? place_entity+0x4f0/0x4f0 [ 119.151613][ T4913] should_fail+0x383/0x4b0 [ 119.156077][ T4913] get_futex_key+0x1a1/0x12d0 [ 119.160804][ T4913] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 119.166827][ T4913] ? futex_wait_restart+0x250/0x250 [ 119.172067][ T4913] ? lock_chain_count+0x20/0x20 [ 119.176971][ T4913] futex_wait_setup+0x4b/0x520 [ 119.181794][ T4913] ? lockdep_hardirqs_on+0x94/0x140 [ 119.187035][ T4913] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 119.192974][ T4913] futex_wait+0x22f/0x680 [ 119.197376][ T4913] ? do_futex+0x12b0/0x12b0 [ 119.201962][ T4913] ? verify_lock_unused+0x140/0x140 [ 119.207308][ T4913] ? verify_lock_unused+0x140/0x140 [ 119.212551][ T4913] do_futex+0xdc2/0x12b0 [ 119.216934][ T4913] ? vfs_write+0xaa6/0xd70 [ 119.221435][ T4913] ? futex_exit_release+0x1c0/0x1c0 [ 119.226685][ T4913] ? __context_tracking_exit+0x4c/0x80 [ 119.232188][ T4913] __se_sys_futex+0x389/0x420 [ 119.236911][ T4913] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 119.243020][ T4913] ? __x64_sys_futex+0xf0/0xf0 [ 119.247833][ T4913] ? __x64_sys_futex+0x1d/0xf0 [ 119.252642][ T4913] do_syscall_64+0x4c/0xa0 [ 119.257093][ T4913] ? clear_bhb_loop+0x30/0x80 [ 119.261807][ T4913] ? clear_bhb_loop+0x30/0x80 [ 119.266529][ T4913] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 119.272487][ T4913] RIP: 0033:0x7fbf98b490d9 [ 119.276943][ T4913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.296692][ T4913] RSP: 002b:00007fbf96da10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 119.305182][ T4913] RAX: ffffffffffffffda RBX: 00007fbf98dd0fa8 RCX: 00007fbf98b490d9 [ 119.313195][ T4913] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbf98dd0fa8 [ 119.321229][ T4913] RBP: 00007fbf98dd0fa0 R08: 0000000000000000 R09: 0000000000000000 [ 119.329236][ T4913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.337266][ T4913] R13: 00007fbf98dd1038 R14: 00007ffc42ce6580 R15: 00007ffc42ce6668 [ 119.345307][ T4913] [ 122.411298][ T4945] Illegal XDP return value 4294967277, expect packet loss! [ 123.174940][ T4952] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 123.235801][ T4954] loop0: detected capacity change from 0 to 512 [ 123.383463][ T4954] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 123.412071][ T4960] input: syz0 as /devices/virtual/input/input6 [ 123.440028][ T4954] EXT4-fs (loop0): 1 truncate cleaned up [ 123.447079][ T4954] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,. Quota mode: none. [ 124.277754][ T4974] loop2: detected capacity change from 0 to 1024 [ 124.432570][ T4974] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,norecovery,min_batch_time=0x0000000000000001,nombcache,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,usrquota,barrier=0x0000000000000007,barrier=0x00. Quota mode: writeback. [ 127.000414][ T5027] loop2: detected capacity change from 0 to 128 [ 127.235844][ T5027] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 127.246659][ T5027] ext4 filesystem being mounted at /34/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 127.605986][ T5032] rnbd_client L211: map_device: Parameters missing [ 130.241744][ T146] Bluetooth: hci4: ACL packet too small [ 130.550603][ T5070] loop4: detected capacity change from 0 to 4096 [ 131.637120][ T5070] EXT4-fs (loop4): Test dummy encryption mode enabled [ 131.722758][ T5070] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback. [ 131.871261][ T5084] loop3: detected capacity change from 0 to 128 [ 132.621996][ T5090] overlayfs: missing 'workdir' [ 133.191606][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.198016][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.225245][ T5096] fuse: Bad value for 'group_id' [ 133.371504][ T5084] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 133.382348][ T5084] ext4 filesystem being mounted at /51/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 133.718113][ T5098] rnbd_client L211: map_device: Parameters missing [ 136.708165][ T5131] process 'syz.0.270' launched './file1' with NULL argv: empty string added [ 137.416536][ T5140] device syzkaller0 entered promiscuous mode [ 138.526767][ T5156] loop2: detected capacity change from 0 to 2048 [ 139.077165][ T5156] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 139.420378][ T5170] loop1: detected capacity change from 0 to 512 [ 139.640775][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 139.659564][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 139.668029][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 141.014623][ T5170] EXT4-fs (loop1): 1 truncate cleaned up [ 141.037552][ T5170] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,jqfmt=vfsv1,noload,errors=remount-ro,usrjquota=,. Quota mode: none. [ 143.478034][ T5193] loop2: detected capacity change from 0 to 128 [ 143.609649][ T5193] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 143.621256][ T5193] ext4 filesystem being mounted at /46/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 143.841918][ T5193] rnbd_client L211: map_device: Parameters missing [ 144.129579][ T5200] loop0: detected capacity change from 0 to 1024 [ 144.302872][ T5202] loop1: detected capacity change from 0 to 512 [ 144.384128][ T5200] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,delalloc,journal_dev=0x0000000000000009,errors=remount-ro,. Quota mode: none. [ 144.484886][ T5200] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.563401][ T5212] loop4: detected capacity change from 0 to 512 [ 144.631650][ T5202] EXT4-fs (loop1): 1 orphan inode deleted [ 144.684066][ T5212] EXT4-fs (loop4): Ignoring removed orlov option [ 144.698133][ T5202] EXT4-fs (loop1): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 144.807699][ T5202] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.829177][ T5212] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 144.836417][ T5212] EXT4-fs (loop4): Ignoring removed bh option [ 144.979230][ T5216] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.292: iget: bad i_size value: 360287970189639690 [ 145.921570][ T5202] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.292: iget: bad i_size value: 360287970189639690 [ 145.936035][ T5200] EXT4-fs error (device loop0): ext4_map_blocks:741: inode #15: comm syz.0.290: lblock 0 mapped to illegal pblock 0 (length 6) [ 145.967031][ T5212] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.294: corrupted in-inode xattr [ 146.095756][ T5212] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.294: couldn't read orphan inode 15 (err -117) [ 146.138434][ T5200] EXT4-fs (loop0): Remounting filesystem read-only [ 146.209815][ T5212] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,orlov,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,grpquota,bh,init_itable=0x0000000000000fff,,errors=continue. Quota mode: writeback. [ 146.434420][ T5212] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 147.312199][ T5229] loop3: detected capacity change from 0 to 512 [ 150.084563][ T5229] EXT4-fs: error -4 creating inode table initialization thread [ 150.093093][ T5229] EXT4-fs (loop3): mount failed [ 154.289940][ T5296] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 154.944062][ T4263] Process accounting resumed [ 156.369745][ T5315] device syzkaller0 entered promiscuous mode [ 156.401588][ T5317] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 156.431266][ T5317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 156.458437][ T5317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 156.490257][ T5317] device bridge_slave_0 left promiscuous mode [ 156.519846][ T5317] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.602712][ T5317] device bridge_slave_1 left promiscuous mode [ 156.612468][ T5317] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.670964][ T5317] bond0: (slave bond_slave_0): Releasing backup interface [ 156.715380][ T5317] bond0: (slave bond_slave_1): Releasing backup interface [ 156.815947][ T5317] team0: Port device team_slave_0 removed [ 156.885113][ T5317] team0: Port device team_slave_1 removed [ 156.902011][ T5317] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.921249][ T5317] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.936421][ T5317] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.952465][ T5317] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.084187][ T5320] team0: Port device xfrm0 added [ 157.114049][ T5332] loop2: detected capacity change from 0 to 4096 [ 157.159336][ T5332] EXT4-fs (loop2): Test dummy encryption mode enabled [ 157.199471][ T5332] EXT4-fs (loop2): inline encryption not supported [ 157.227543][ T5320] syz.1.326 (5320) used greatest stack depth: 20592 bytes left [ 157.237982][ T5332] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 157.293741][ T5332] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002] [ 157.293857][ T5332] System zones: 0-5 [ 157.342385][ T5332] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,user_xattr,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback. [ 157.358405][ T5340] capability: warning: `syz.1.332' uses 32-bit capabilities (legacy support in use) [ 157.648894][ T5332] fscrypt (loop2): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 157.703458][ T5342] overlayfs: failed to resolve './bus': -2 [ 157.934448][ T5366] device syzkaller0 entered promiscuous mode [ 158.005921][ T5325] ODEBUG: Out of memory. ODEBUG disabled [ 158.086024][ T5372] netlink: 12 bytes leftover after parsing attributes in process `syz.1.343'. [ 158.769037][ T5398] device syzkaller0 entered promiscuous mode [ 158.851068][ T5405] loop2: detected capacity change from 0 to 256 [ 159.025391][ T5410] loop0: detected capacity change from 0 to 512 [ 159.041110][ T5412] netlink: 12 bytes leftover after parsing attributes in process `syz.1.362'. [ 159.271441][ T5410] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 159.302716][ T5410] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #16: comm syz.0.361: corrupted inode contents [ 159.405944][ T5410] EXT4-fs error (device loop0): ext4_dirty_inode:6077: inode #16: comm syz.0.361: mark_inode_dirty error [ 159.551230][ T5410] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #16: comm syz.0.361: corrupted inode contents [ 159.590111][ T5410] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.361: mark_inode_dirty error [ 159.649164][ T5410] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #16: comm syz.0.361: corrupted inode contents [ 159.661571][ T5410] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.361: mark_inode_dirty error [ 159.673731][ T5410] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #16: comm syz.0.361: corrupted inode contents [ 159.693621][ T5410] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 159.828796][ T5410] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #16: comm syz.0.361: corrupted inode contents [ 160.077140][ T5410] EXT4-fs error (device loop0): ext4_truncate:4286: inode #16: comm syz.0.361: mark_inode_dirty error [ 160.421296][ T5410] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 160.498337][ T5410] EXT4-fs (loop0): 1 truncate cleaned up [ 160.547559][ T5410] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 160.617679][ T5410] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.660174][ T5434] loop2: detected capacity change from 0 to 2048 [ 160.674633][ T5410] EXT4-fs error (device loop0): ext4_lookup:1858: inode #15: comm syz.0.361: iget: bad i_size value: 360287970189639690 [ 160.853552][ T5434] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 160.917745][ T5434] ext4 filesystem being mounted at /65/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 160.949246][ C0] vkms_vblank_simulate: vblank timer overrun [ 161.028640][ T5442] loop4: detected capacity change from 0 to 2048 [ 161.246341][ T5442] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 161.347691][ T5442] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.801732][ T5457] fs-verity: sha512 using implementation "sha512-avx2" [ 162.091982][ T5459] loop9: detected capacity change from 0 to 7 [ 162.152785][ T4179] Dev loop9: unable to read RDB block 7 [ 162.161676][ T144] loop: Write error at byte offset 4, length 3584. [ 162.183627][ T4179] loop9: unable to read partition table [ 162.191298][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 162.202845][ C0] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 162.216783][ T144] loop: Write error at byte offset 4, length 3584. [ 162.228393][ T4179] loop9: partition table beyond EOD, truncated [ 162.269176][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 162.280651][ C0] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 162.297599][ T5459] Dev loop9: unable to read RDB block 7 [ 162.303591][ T5459] loop9: unable to read partition table [ 162.327939][ T5459] loop9: partition table beyond EOD, truncated [ 162.339106][ T5430] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.347083][ T5430] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.375285][ T5459] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 162.424480][ T3559] Dev loop9: unable to read RDB block 7 [ 162.432062][ T3559] loop9: unable to read partition table [ 162.442288][ T3559] loop9: partition table beyond EOD, truncated [ 163.571264][ T5430] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.715118][ T5430] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.582207][ T5430] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.598272][ T5430] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.627432][ T5430] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.636449][ T5430] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.816180][ T5505] loop1: detected capacity change from 0 to 128 [ 167.870233][ T5511] binder: 5507:5511 ioctl c0306201 0 returned -14 [ 167.908922][ T5505] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,dioread_lock,nouid32,,errors=continue. Quota mode: none. [ 168.007886][ T5505] ext4 filesystem being mounted at /79/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 168.094101][ T5519] device syzkaller0 entered promiscuous mode [ 169.693382][ T5552] loop2: detected capacity change from 0 to 128 [ 170.198239][ T5552] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 170.209388][ T5552] ext4 filesystem being mounted at /76/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 170.241053][ C1] vkms_vblank_simulate: vblank timer overrun [ 170.637545][ T5563] rnbd_client L211: map_device: Parameters missing [ 171.064839][ T5569] device syzkaller0 entered promiscuous mode [ 173.239436][ T5592] loop4: detected capacity change from 0 to 2048 [ 173.439305][ T5592] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,noinit_itable,i_version,init_itable,,errors=continue. Quota mode: none. [ 173.507630][ T5592] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.253433][ T5627] loop4: detected capacity change from 0 to 2048 [ 176.395520][ T5627] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 177.913229][ T5657] loop1: detected capacity change from 0 to 512 [ 178.148155][ T5657] EXT4-fs (loop1): inline encryption not supported [ 178.155979][ T5657] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 179.205741][ T5657] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 179.256713][ T5657] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.440: invalid indirect mapped block 2683928664 (level 1) [ 179.478668][ T5657] EXT4-fs (loop1): 1 truncate cleaned up [ 179.484648][ T5657] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,init_itable=0x0000000000000b8f,jqfmt=vfsv1,inlinecrypt,usrjquota=.sb=0x0000000000000007,nodiscard,jqfmt=vfsv0,noload,debug_want_extra_isize=0x0000000000000006,noload,,,errors=continue. Quota mode: writeback. [ 180.577892][ T5657] EXT4-fs (loop1): shut down requested (2) [ 181.249198][ T5688] loop0: detected capacity change from 0 to 512 [ 182.208548][ T5688] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 182.498433][ T5688] EXT4-fs (loop0): 1 truncate cleaned up [ 182.504161][ T5688] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,. Quota mode: none. [ 186.373294][ T5727] loop0: detected capacity change from 0 to 512 [ 186.559051][ T5727] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.461: iget: bad i_size value: 38620345925642 [ 186.739437][ T5727] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.461: couldn't read orphan inode 15 (err -117) [ 186.816654][ T5727] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 186.953021][ T5742] loop4: detected capacity change from 0 to 512 [ 187.024294][ T5742] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 187.145204][ T5748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.465'. [ 187.319170][ T5742] EXT4-fs (loop4): 1 truncate cleaned up [ 187.328285][ T5742] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,. Quota mode: none. [ 188.222539][ T5732] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 190.147469][ T26] audit: type=1800 audit(1787092073.177:6): pid=5756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.463" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 190.261963][ T4291] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.610059][ T5768] loop2: detected capacity change from 0 to 512 [ 190.802272][ T4291] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.165709][ T5768] EXT4-fs (loop2): Ignoring removed oldalloc option [ 191.213597][ T5768] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 191.244675][ T4291] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.284596][ T5768] EXT4-fs (loop2): 1 orphan inode deleted [ 191.357905][ T5768] EXT4-fs (loop2): 1 truncate cleaned up [ 191.375017][ T5768] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,bsddf,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,quota,grpid,oldalloc,. Quota mode: writeback. [ 192.963293][ T1109] Bluetooth: hci2: command 0x0406 tx timeout [ 192.980505][ T1109] Bluetooth: hci1: command 0x0406 tx timeout [ 192.987619][ T1109] Bluetooth: hci3: command 0x0406 tx timeout [ 192.991696][ T5768] overlayfs: filesystem on './file0' not supported as upperdir [ 192.993974][ T1109] Bluetooth: hci4: command 0x0406 tx timeout [ 194.962078][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.968589][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.991201][ T4291] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.347927][ T4192] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 195.643479][ T4192] EXT4-fs (loop2): Remounting filesystem read-only [ 195.698597][ T5806] netlink: 'syz.4.482': attribute type 10 has an invalid length. [ 195.719399][ T4192] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 17 [ 195.747846][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.755447][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.773517][ T4192] EXT4-fs (loop2): Remounting filesystem read-only [ 195.828791][ T4192] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 17 [ 195.862231][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.869540][ T5806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.877039][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.884427][ T5806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.893613][ T4192] EXT4-fs (loop2): Remounting filesystem read-only [ 195.969764][ T5811] loop3: detected capacity change from 0 to 8 [ 195.984559][ T5806] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 196.018189][ T1107] Bluetooth: hci0: command 0x0409 tx timeout [ 196.122425][ T5793] wlan1 speed is unknown, defaulting to 1000 [ 196.598963][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 197.085275][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.229300][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.256949][ T5793] device bridge_slave_0 entered promiscuous mode [ 197.285467][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.312333][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.402632][ T5793] device bridge_slave_1 entered promiscuous mode [ 198.074295][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.158882][ T5846] wlan1 speed is unknown, defaulting to 1000 [ 198.169480][ T4231] Bluetooth: hci0: command 0x041b tx timeout [ 198.195510][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.288731][ T5862] netlink: 64 bytes leftover after parsing attributes in process `syz.1.496'. [ 198.348079][ T5859] device syzkaller1 entered promiscuous mode [ 198.444530][ T5793] team0: Port device team_slave_0 added [ 198.476639][ T5793] team0: Port device team_slave_1 added [ 199.160213][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.167230][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.253215][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.292635][ T5868] bonding: no command found in bonding_masters - use +ifname or -ifname [ 199.325941][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.334004][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.522811][ T1109] Bluetooth: hci2: command 0x0409 tx timeout [ 199.529073][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.146265][ T5883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.501'. [ 200.182050][ T5883] netlink: 12 bytes leftover after parsing attributes in process `syz.3.501'. [ 200.191691][ T4229] Bluetooth: hci0: command 0x040f tx timeout [ 200.226625][ T5883] netlink: 'syz.3.501': attribute type 11 has an invalid length. [ 200.301455][ T5883] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.311044][ T5883] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.319835][ T5883] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.328680][ T5883] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.351428][ T5883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.501'. [ 200.360498][ T5883] netlink: 12 bytes leftover after parsing attributes in process `syz.3.501'. [ 200.369503][ T5883] netlink: 'syz.3.501': attribute type 11 has an invalid length. [ 200.409855][ T5793] device hsr_slave_0 entered promiscuous mode [ 200.425954][ T5793] device hsr_slave_1 entered promiscuous mode [ 200.443182][ T5793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.461861][ T5793] Cannot create hsr debugfs directory [ 201.093415][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 201.537601][ T4229] Bluetooth: hci2: command 0x041b tx timeout [ 201.556292][ T1109] wlan1 speed is unknown, defaulting to 1000 [ 201.649893][ T5919] loop3: detected capacity change from 0 to 512 [ 201.725930][ T5919] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 201.762373][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.778275][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.817862][ T5846] device bridge_slave_0 entered promiscuous mode [ 201.828097][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.840871][ T5919] EXT4-fs (loop3): 1 truncate cleaned up [ 201.846570][ T5919] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 201.858160][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.866599][ T5846] device bridge_slave_1 entered promiscuous mode [ 202.004633][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.098103][ T4291] device hsr_slave_0 left promiscuous mode [ 202.156495][ T4291] device hsr_slave_1 left promiscuous mode [ 202.167955][ T4291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.175514][ T4291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.228141][ T4291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.267865][ T1109] Bluetooth: hci0: command 0x0419 tx timeout [ 202.285843][ T4291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.314291][ T4291] device bridge_slave_1 left promiscuous mode [ 202.346830][ T4291] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.412354][ T4291] device bridge_slave_0 left promiscuous mode [ 202.435467][ T4291] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.496034][ T4291] device veth1_macvtap left promiscuous mode [ 202.528078][ T4291] device veth0_macvtap left promiscuous mode [ 202.544741][ T4291] device veth1_vlan left promiscuous mode [ 202.570265][ T4291] device veth0_vlan left promiscuous mode [ 203.083186][ T4291] team0 (unregistering): Port device team_slave_1 removed [ 203.110785][ T4291] team0 (unregistering): Port device team_slave_0 removed [ 203.145537][ T4291] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.165191][ T4291] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.190977][ T4233] infiniband syz1: ib_query_port failed (-19) [ 203.299319][ T4291] bond0 (unregistering): Released all slaves [ 203.628331][ T4229] Bluetooth: hci2: command 0x040f tx timeout [ 203.892531][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.936693][ T2284] bond0 speed is unknown, defaulting to 1000 [ 204.087262][ T5846] team0: Port device team_slave_0 added [ 204.109155][ T5846] team0: Port device team_slave_1 added [ 204.227085][ T5793] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 204.264111][ T5793] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 204.304939][ T5793] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 204.363039][ T5793] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 204.397080][ T5965] loop1: detected capacity change from 0 to 8192 [ 204.404341][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.414958][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.593109][ T5965] loop1: p1[EZD] p3 p4 [ 204.662393][ T5965] loop1: partition table partially beyond EOD, truncated [ 204.674161][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.733387][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.765622][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.808327][ T5965] loop1: p3 start 150994944 is beyond EOD, truncated [ 204.819959][ T5965] loop1: p4 size 50331648 extends beyond EOD, truncated [ 204.954264][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.149504][ T5984] loop4: detected capacity change from 0 to 512 [ 205.177298][ T5846] device hsr_slave_0 entered promiscuous mode [ 205.189783][ T5846] device hsr_slave_1 entered promiscuous mode [ 205.198758][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 205.200931][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 205.228036][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.244519][ T5984] EXT4-fs (loop4): Invalid journal IO priority (must be 0-7) [ 205.252977][ T5846] Cannot create hsr debugfs directory [ 205.285659][ T5985] device syzkaller0 entered promiscuous mode [ 205.759636][ T4268] Bluetooth: hci2: command 0x0419 tx timeout [ 207.172661][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.259639][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 207.268010][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 207.344923][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.402347][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 207.442817][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 207.464224][ T4408] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.471598][ T4408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.585683][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 207.662438][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 207.683446][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 207.803538][ T4408] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.810843][ T4408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.036796][ T6014] loop1: detected capacity change from 0 to 512 [ 208.183866][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 208.326641][ T6014] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,nombcache,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 208.423336][ T6014] ext4 filesystem being mounted at /113/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 208.527042][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 208.533189][ T6034] loop3: detected capacity change from 0 to 128 [ 208.555155][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 208.629623][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 208.659034][ T6034] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 208.669794][ T6034] ext4 filesystem being mounted at /101/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 208.766914][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 208.840679][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 208.915358][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 208.938684][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 208.947697][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 209.128114][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 209.187866][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 209.281726][ T5846] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 209.360571][ T5846] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 209.392781][ T5846] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 209.449853][ T5846] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 209.489909][ T5793] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 209.933040][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.440807][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 210.548642][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 210.758815][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.383859][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 211.425296][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 211.444288][ T1470] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.451500][ T1470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.542419][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.558580][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 211.568334][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 211.608247][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 211.680045][ T1470] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.687169][ T1470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.724381][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 211.784450][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 211.854460][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 211.919521][ T1470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 212.617524][ T6087] loop4: detected capacity change from 0 to 1024 [ 212.629254][ T6089] loop1: detected capacity change from 0 to 128 [ 212.648681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 212.687264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 212.756938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 212.826854][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 212.837216][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 212.846002][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 212.854829][ T6089] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 212.862864][ T6087] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: none. [ 212.869464][ T6089] ext4 filesystem being mounted at /119/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 212.893729][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 212.933093][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 213.088882][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 213.154872][ T5846] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 213.239002][ T6102] rnbd_client L211: map_device: Parameters missing [ 214.078085][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 214.131759][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 214.252559][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 214.294610][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 214.359935][ T5793] device veth0_vlan entered promiscuous mode [ 214.392561][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 214.434716][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 214.525540][ T5793] device veth1_vlan entered promiscuous mode [ 214.704665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 214.730701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 214.768674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 214.776331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 214.785116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 214.793932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 214.806804][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.844653][ T6121] ptrace attach of ""[6122] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6121] [ 214.884219][ T5793] device veth0_macvtap entered promiscuous mode [ 214.952919][ T5793] device veth1_macvtap entered promiscuous mode [ 215.018537][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.052317][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.093503][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.125489][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.159026][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.210845][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 215.238216][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 215.433209][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.496549][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.547403][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.615388][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.695764][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.861938][ T5793] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.870861][ T5793] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.879761][ T5793] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.888903][ T5793] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.474106][ T4291] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.708689][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 216.725505][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 218.220765][ T6185] Invalid ELF header type: 2 != 1 [ 218.986737][ T4291] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.151357][ T5846] device veth0_vlan entered promiscuous mode [ 219.172313][ T5846] device veth1_vlan entered promiscuous mode [ 219.241435][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 219.266953][ T4293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.292343][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 219.301537][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 219.310231][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 219.319215][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 219.325143][ T4293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.329594][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 219.467856][ T26] audit: type=1326 audit(1787092102.497:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.3.562" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f56456630d9 code=0x0 [ 219.790016][ T6197] capability: warning: `syz.3.562' uses deprecated v2 capabilities in a way that may be insecure [ 219.886384][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 219.899319][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 219.915136][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 219.927102][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 219.945403][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 219.969890][ T4291] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.056089][ T5846] device veth0_macvtap entered promiscuous mode [ 220.087568][ T4410] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.095540][ T4410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.130504][ T4291] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.326212][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 220.341954][ T5846] device veth1_macvtap entered promiscuous mode [ 220.413404][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.461515][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.474399][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.503723][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.523744][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.536171][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.572895][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.659352][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.872432][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.904206][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.529419][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.590716][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.643301][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.654727][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.671667][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 221.682029][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 221.690995][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 221.713132][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 221.754618][ T5846] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.911340][ T5846] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.677370][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 222.698379][ T6225] loop1: detected capacity change from 0 to 512 [ 222.736173][ T5846] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.757441][ T5846] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.901779][ T6225] EXT4-fs (loop1): Unrecognized mount option "appraise_type=imasig" or missing value [ 226.097890][ T1470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.105836][ T1470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.129086][ T6256] loop4: detected capacity change from 0 to 7 [ 226.141859][ T6256] Dev loop4: unable to read RDB block 7 [ 226.158744][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 226.178543][ T6265] tmpfs: Unknown parameter 'quota' [ 226.184011][ T6256] loop4: AHDI p2 p3 [ 226.207595][ T6256] loop4: partition table partially beyond EOD, truncated [ 226.223599][ T4293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.239256][ T6256] loop4: p3 start 335544320 is beyond EOD, truncated [ 226.292406][ T4293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.321345][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 228.996509][ T6263] syz.1.579 (6263): drop_caches: 0 [ 229.617382][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 229.637357][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 229.647351][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 229.657357][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 229.667356][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 229.677355][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 229.687353][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 229.707366][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 229.717354][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 230.590375][ T4231] Bluetooth: hci2: command 0x0405 tx timeout [ 231.627245][ T4291] device hsr_slave_0 left promiscuous mode [ 231.644646][ T4291] device hsr_slave_1 left promiscuous mode [ 231.811897][ T4291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.825162][ T4291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.871053][ T4291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.959359][ T4291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.967594][ T4291] device bridge_slave_1 left promiscuous mode [ 231.973957][ T4291] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.984320][ T4291] device bridge_slave_0 left promiscuous mode [ 231.991027][ T4291] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.006504][ T4291] device veth1_macvtap left promiscuous mode [ 232.012875][ T4291] device veth0_macvtap left promiscuous mode [ 232.019972][ T4291] device veth1_vlan left promiscuous mode [ 232.025989][ T4291] device veth0_vlan left promiscuous mode [ 233.204778][ T6336] loop5: detected capacity change from 0 to 128 [ 235.439704][ T4291] team0 (unregistering): Port device team_slave_1 removed [ 235.487095][ T4291] team0 (unregistering): Port device team_slave_0 removed [ 235.545799][ T4291] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.582997][ T4291] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.813636][ T6365] loop6: detected capacity change from 0 to 512 [ 235.879432][ T6365] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 235.941693][ T6365] EXT4-fs (loop6): 1 truncate cleaned up [ 235.955374][ T6365] EXT4-fs (loop6): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,. Quota mode: none. [ 236.177961][ T4291] bond0 (unregistering): Released all slaves [ 236.448489][ T6336] netlink: 8 bytes leftover after parsing attributes in process `syz.5.596'. [ 236.537428][ T26] audit: type=1800 audit(1787092119.567:8): pid=6371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.605" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 236.599969][ T6336] netlink: 'syz.5.596': attribute type 5 has an invalid length. [ 236.640105][ T6336] netlink: 28 bytes leftover after parsing attributes in process `syz.5.596'. [ 236.671067][ T6336] device geneve2 entered promiscuous mode [ 236.915731][ T6388] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 236.982286][ T6386] netlink: 32 bytes leftover after parsing attributes in process `syz.3.609'. [ 238.370410][ T6406] loop4: detected capacity change from 0 to 512 [ 238.425407][ T6397] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.647025][ T6411] loop1: detected capacity change from 0 to 128 [ 238.888762][ T6406] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 239.381520][ T6406] EXT4-fs (loop4): 1 truncate cleaned up [ 239.407032][ T6406] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,. Quota mode: none. [ 240.959320][ T26] audit: type=1800 audit(1787092123.637:9): pid=6425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.617" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 241.003062][ T6411] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 241.013868][ T6411] ext4 filesystem being mounted at /137/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 241.640013][ T6437] rnbd_client L211: map_device: Parameters missing [ 243.391615][ T6462] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 244.889775][ T6482] loop5: detected capacity change from 0 to 512 [ 244.980381][ T6482] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 245.156562][ T6487] loop1: detected capacity change from 0 to 128 [ 245.241167][ T6487] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 245.251990][ T6487] ext4 filesystem being mounted at /141/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 245.268290][ T6482] EXT4-fs (loop5): 1 truncate cleaned up [ 245.464851][ T6482] EXT4-fs (loop5): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,. Quota mode: none. [ 245.594890][ T6494] rnbd_client L211: map_device: Parameters missing [ 251.432528][ T6561] loop6: detected capacity change from 0 to 512 [ 251.577727][ T6561] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 251.894247][ T6561] EXT4-fs (loop6): 1 truncate cleaned up [ 251.900187][ T6561] EXT4-fs (loop6): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,. Quota mode: none. [ 253.973739][ T6584] netlink: 12 bytes leftover after parsing attributes in process `syz.5.656'. [ 254.720881][ T6594] ================================================================== [ 254.729506][ T6594] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x5a3/0x650 [ 254.738772][ T6594] Read of size 1 at addr ffff8880609c1608 by task syz.6.657/6594 [ 254.746527][ T6594] [ 254.748890][ T6594] CPU: 1 PID: 6594 Comm: syz.6.657 Not tainted syzkaller #0 [ 254.756209][ T6594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 254.766304][ T6594] Call Trace: [ 254.769626][ T6594] [ 254.772595][ T6594] dump_stack_lvl+0x188/0x250 [ 254.777330][ T6594] ? show_regs_print_info+0x20/0x20 [ 254.782588][ T6594] ? load_image+0x410/0x410 [ 254.787131][ T6594] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 254.792645][ T6594] print_address_description+0x60/0x2d0 [ 254.798248][ T6594] ? xfrm_policy_inexact_list_reinsert+0x5a3/0x650 [ 254.804796][ T6594] kasan_report+0xdf/0x130 [ 254.809350][ T6594] ? xfrm_policy_inexact_list_reinsert+0x5a3/0x650 [ 254.815896][ T6594] xfrm_policy_inexact_list_reinsert+0x5a3/0x650 [ 254.822280][ T6594] xfrm_policy_inexact_insert_node+0x95f/0xb70 [ 254.828498][ T6594] xfrm_policy_inexact_alloc_chain+0x7a2/0xe70 [ 254.834739][ T6594] ? xfrm_policy_inexact_insert+0xd7/0x12d0 [ 254.840678][ T6594] xfrm_policy_inexact_insert+0xd7/0x12d0 [ 254.846444][ T6594] ? policy_hash_bysel+0x139/0x750 [ 254.851597][ T6594] xfrm_policy_insert+0x10f/0x940 [ 254.856680][ T6594] xfrm_add_policy+0x4e6/0x870 [ 254.861498][ T6594] ? xfrm_dump_sa_done+0xc0/0xc0 [ 254.866469][ T6594] ? apparmor_capable+0x12c/0x190 [ 254.871534][ T6594] ? __nla_parse+0x3c/0x50 [ 254.875992][ T6594] xfrm_user_rcv_msg+0x694/0x980 [ 254.880979][ T6594] ? xfrm_netlink_rcv+0x90/0x90 [ 254.885906][ T6594] ? __mutex_lock_common+0x435/0x2400 [ 254.891329][ T6594] netlink_rcv_skb+0x1e9/0x430 [ 254.896235][ T6594] ? xfrm_netlink_rcv+0x66/0x90 [ 254.901127][ T6594] ? xfrm_netlink_rcv+0x90/0x90 [ 254.906052][ T6594] ? netlink_ack+0xb10/0xb10 [ 254.910691][ T6594] ? __lock_acquire+0x7b50/0x7b50 [ 254.915789][ T6594] xfrm_netlink_rcv+0x75/0x90 [ 254.920514][ T6594] netlink_unicast+0x78f/0x940 [ 254.925328][ T6594] netlink_sendmsg+0x8ba/0xbe0 [ 254.930145][ T6594] ? netlink_getsockopt+0x570/0x570 [ 254.935385][ T6594] ? aa_sock_msg_perm+0x94/0x150 [ 254.940363][ T6594] ? apparmor_socket_sendmsg+0x88/0x230 [ 254.945951][ T6594] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 254.951280][ T6594] ? security_socket_sendmsg+0x7c/0xa0 [ 254.956803][ T6594] ? netlink_getsockopt+0x570/0x570 [ 254.962046][ T6594] ____sys_sendmsg+0x5be/0x8f0 [ 254.966859][ T6594] ? __sys_sendmsg_sock+0x30/0x30 [ 254.971942][ T6594] ? import_iovec+0x6f/0xa0 [ 254.976492][ T6594] ___sys_sendmsg+0x236/0x2e0 [ 254.981214][ T6594] ? __sys_sendmsg+0x290/0x290 [ 254.986065][ T6594] __se_sys_sendmsg+0x1b7/0x2a0 [ 254.990960][ T6594] ? __x64_sys_sendmsg+0x80/0x80 [ 254.995939][ T6594] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 255.001986][ T6594] ? lockdep_hardirqs_on+0x94/0x140 [ 255.007240][ T6594] do_syscall_64+0x4c/0xa0 [ 255.011695][ T6594] ? clear_bhb_loop+0x30/0x80 [ 255.016420][ T6594] ? clear_bhb_loop+0x30/0x80 [ 255.021142][ T6594] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 255.027076][ T6594] RIP: 0033:0x7f052a9090d9 [ 255.031536][ T6594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.051209][ T6594] RSP: 002b:00007f0528b61028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.059670][ T6594] RAX: ffffffffffffffda RBX: 00007f052ab90fa0 RCX: 00007f052a9090d9 [ 255.067697][ T6594] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000008 [ 255.075801][ T6594] RBP: 00007f052a9a0024 R08: 0000000000000000 R09: 0000000000000000 [ 255.083811][ T6594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.091819][ T6594] R13: 00007f052ab91038 R14: 00007f052ab90fa0 R15: 00007fff79644f78 [ 255.099848][ T6594] [ 255.102902][ T6594] [ 255.105297][ T6594] Allocated by task 6594: [ 255.109677][ T6594] __kasan_kmalloc+0xaf/0xe0 [ 255.114320][ T6594] sk_prot_alloc+0xe7/0x210 [ 255.118862][ T6594] sk_alloc+0x2f/0x310 [ 255.122971][ T6594] pfkey_create+0xd8/0x560 [ 255.127423][ T6594] __sock_create+0x473/0x910 [ 255.132050][ T6594] __sys_socket+0xe2/0x170 [ 255.136519][ T6594] __x64_sys_socket+0x76/0x80 [ 255.141229][ T6594] do_syscall_64+0x4c/0xa0 [ 255.145680][ T6594] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 255.151617][ T6594] [ 255.153961][ T6594] The buggy address belongs to the object at ffff8880609c1000 [ 255.153961][ T6594] which belongs to the cache kmalloc-2k of size 2048 [ 255.168051][ T6594] The buggy address is located 1544 bytes inside of [ 255.168051][ T6594] 2048-byte region [ffff8880609c1000, ffff8880609c1800) [ 255.181546][ T6594] The buggy address belongs to the page: [ 255.187218][ T6594] page:ffffea0001827000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x609c0 [ 255.197411][ T6594] head:ffffea0001827000 order:3 compound_mapcount:0 compound_pincount:0 [ 255.205764][ T6594] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 255.213790][ T6594] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016c42000 [ 255.222396][ T6594] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 255.230991][ T6594] page dumped because: kasan: bad access detected [ 255.237419][ T6594] page_owner tracks the page as allocated [ 255.243143][ T6594] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4191, ts 68446332948, free_ts 24673173736 [ 255.261650][ T6594] get_page_from_freelist+0x24f6/0x2670 [ 255.267225][ T6594] __alloc_pages+0x1ee/0x480 [ 255.271857][ T6594] new_slab+0xc0/0x4b0 [ 255.275943][ T6594] ___slab_alloc+0x807/0xdd0 [ 255.280549][ T6594] __kmalloc_node_track_caller+0x13d/0x3a0 [ 255.286371][ T6594] __alloc_skb+0x22c/0x750 [ 255.290801][ T6594] inet6_ifinfo_notify+0x6c/0x110 [ 255.295839][ T6594] addrconf_notify+0xbeb/0xf20 [ 255.300622][ T6594] raw_notifier_call_chain+0xcb/0x160 [ 255.306030][ T6594] __dev_notify_flags+0x194/0x300 [ 255.311159][ T6594] dev_change_flags+0xda/0x1a0 [ 255.315940][ T6594] do_setlink+0xca4/0x29d0 [ 255.320379][ T6594] rtnl_newlink+0x15bb/0x1920 [ 255.325072][ T6594] rtnetlink_rcv_msg+0x7f1/0xf10 [ 255.330025][ T6594] netlink_rcv_skb+0x1e9/0x430 [ 255.334951][ T6594] netlink_unicast+0x78f/0x940 [ 255.339755][ T6594] page last free stack trace: [ 255.344436][ T6594] free_unref_page_prepare+0x637/0x6c0 [ 255.349909][ T6594] free_unref_page+0x8f/0x2a0 [ 255.354601][ T6594] free_contig_range+0x96/0xf0 [ 255.359387][ T6594] destroy_args+0xef/0xa00 [ 255.363904][ T6594] debug_vm_pgtable+0x321/0x380 [ 255.368772][ T6594] do_one_initcall+0x272/0x730 [ 255.373553][ T6594] do_initcall_level+0x13d/0x1f0 [ 255.378506][ T6594] do_initcalls+0x4b/0x90 [ 255.382852][ T6594] kernel_init_freeable+0x3d5/0x560 [ 255.388064][ T6594] kernel_init+0x19/0x1b0 [ 255.392415][ T6594] ret_from_fork+0x1f/0x30 [ 255.396967][ T6594] [ 255.399303][ T6594] Memory state around the buggy address: [ 255.404938][ T6594] ffff8880609c1500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 255.413009][ T6594] ffff8880609c1580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 255.421098][ T6594] >ffff8880609c1600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 255.429171][ T6594] ^ [ 255.433514][ T6594] ffff8880609c1680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 255.441702][ T6594] ffff8880609c1700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 255.449773][ T6594] ================================================================== [ 255.457839][ T6594] Disabling lock debugging due to kernel taint [ 255.464087][ T6594] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 255.471311][ T6594] CPU: 1 PID: 6594 Comm: syz.6.657 Tainted: G B syzkaller #0 [ 255.480008][ T6594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 255.490079][ T6594] Call Trace: [ 255.493369][ T6594] [ 255.496316][ T6594] dump_stack_lvl+0x188/0x250 [ 255.501011][ T6594] ? show_regs_print_info+0x20/0x20 [ 255.506351][ T6594] ? load_image+0x410/0x410 [ 255.510877][ T6594] panic+0x2f8/0x850 [ 255.514788][ T6594] ? bpf_jit_dump+0xd0/0xd0 [ 255.519308][ T6594] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 255.525213][ T6594] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 255.531124][ T6594] ? _raw_spin_unlock+0x40/0x40 [ 255.536013][ T6594] ? xfrm_policy_inexact_list_reinsert+0x5a3/0x650 [ 255.542558][ T6594] check_panic_on_warn+0x80/0xa0 [ 255.547511][ T6594] ? xfrm_policy_inexact_list_reinsert+0x5a3/0x650 [ 255.554024][ T6594] end_report+0x6d/0xf0 [ 255.558199][ T6594] kasan_report+0x102/0x130 [ 255.562726][ T6594] ? xfrm_policy_inexact_list_reinsert+0x5a3/0x650 [ 255.569241][ T6594] xfrm_policy_inexact_list_reinsert+0x5a3/0x650 [ 255.575585][ T6594] xfrm_policy_inexact_insert_node+0x95f/0xb70 [ 255.581761][ T6594] xfrm_policy_inexact_alloc_chain+0x7a2/0xe70 [ 255.587934][ T6594] ? xfrm_policy_inexact_insert+0xd7/0x12d0 [ 255.593848][ T6594] xfrm_policy_inexact_insert+0xd7/0x12d0 [ 255.599590][ T6594] ? policy_hash_bysel+0x139/0x750 [ 255.604807][ T6594] xfrm_policy_insert+0x10f/0x940 [ 255.609849][ T6594] xfrm_add_policy+0x4e6/0x870 [ 255.614634][ T6594] ? xfrm_dump_sa_done+0xc0/0xc0 [ 255.619613][ T6594] ? apparmor_capable+0x12c/0x190 [ 255.624671][ T6594] ? __nla_parse+0x3c/0x50 [ 255.629106][ T6594] xfrm_user_rcv_msg+0x694/0x980 [ 255.634063][ T6594] ? xfrm_netlink_rcv+0x90/0x90 [ 255.638941][ T6594] ? __mutex_lock_common+0x435/0x2400 [ 255.644335][ T6594] netlink_rcv_skb+0x1e9/0x430 [ 255.649113][ T6594] ? xfrm_netlink_rcv+0x66/0x90 [ 255.653983][ T6594] ? xfrm_netlink_rcv+0x90/0x90 [ 255.658852][ T6594] ? netlink_ack+0xb10/0xb10 [ 255.663467][ T6594] ? __lock_acquire+0x7b50/0x7b50 [ 255.668519][ T6594] xfrm_netlink_rcv+0x75/0x90 [ 255.673219][ T6594] netlink_unicast+0x78f/0x940 [ 255.678001][ T6594] netlink_sendmsg+0x8ba/0xbe0 [ 255.682785][ T6594] ? netlink_getsockopt+0x570/0x570 [ 255.687996][ T6594] ? aa_sock_msg_perm+0x94/0x150 [ 255.692948][ T6594] ? apparmor_socket_sendmsg+0x88/0x230 [ 255.698508][ T6594] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 255.703809][ T6594] ? security_socket_sendmsg+0x7c/0xa0 [ 255.709285][ T6594] ? netlink_getsockopt+0x570/0x570 [ 255.714498][ T6594] ____sys_sendmsg+0x5be/0x8f0 [ 255.719282][ T6594] ? __sys_sendmsg_sock+0x30/0x30 [ 255.724323][ T6594] ? import_iovec+0x6f/0xa0 [ 255.728850][ T6594] ___sys_sendmsg+0x236/0x2e0 [ 255.733544][ T6594] ? __sys_sendmsg+0x290/0x290 [ 255.738348][ T6594] __se_sys_sendmsg+0x1b7/0x2a0 [ 255.743213][ T6594] ? __x64_sys_sendmsg+0x80/0x80 [ 255.748163][ T6594] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 255.754168][ T6594] ? lockdep_hardirqs_on+0x94/0x140 [ 255.759384][ T6594] do_syscall_64+0x4c/0xa0 [ 255.763810][ T6594] ? clear_bhb_loop+0x30/0x80 [ 255.768502][ T6594] ? clear_bhb_loop+0x30/0x80 [ 255.773197][ T6594] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 255.779104][ T6594] RIP: 0033:0x7f052a9090d9 [ 255.783537][ T6594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.803159][ T6594] RSP: 002b:00007f0528b61028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.811596][ T6594] RAX: ffffffffffffffda RBX: 00007f052ab90fa0 RCX: 00007f052a9090d9 [ 255.819598][ T6594] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000008 [ 255.827586][ T6594] RBP: 00007f052a9a0024 R08: 0000000000000000 R09: 0000000000000000 [ 255.835594][ T6594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.843591][ T6594] R13: 00007f052ab91038 R14: 00007f052ab90fa0 R15: 00007fff79644f78 [ 255.851591][ T6594] [ 255.854929][ T6594] Kernel Offset: disabled [ 255.859269][ T6594] Rebooting in 86400 seconds..