last executing test programs: 1m29.344781213s ago: executing program 2 (id=178): setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x10b}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 1m26.756668614s ago: executing program 2 (id=183): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r3, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) 1m25.660484848s ago: executing program 2 (id=186): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES32], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) rt_sigqueueinfo(r3, 0x21, &(0x7f0000000ac0)={0x0, 0x9, 0xfffffffe}) 1m23.578983259s ago: executing program 2 (id=191): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) mount$fuse(0x0, 0x0, 0x0, 0x80000, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x280449c, 0x0) read$FUSE(r1, 0x0, 0x0) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 1m21.34877561s ago: executing program 2 (id=198): sendmsg(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000000)=@nfc_llcp={0x27, 0x0, 0x0, 0x4, 0x1, 0x7, "ec790c9ac99dc41eac8c80d4677a9d955a1f345a1e7aca648d449425617f8ead754c1dff22d18e523b173162617fd35dab8cd94a4d49485a282c002a80e4d7", 0x26}, 0x80, 0x0}, 0x4000011) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x70, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m18.9485783s ago: executing program 2 (id=204): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000180)={0x4}) ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, &(0x7f0000000200)) close(0xffffffffffffffff) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000640)="66ba2100ec430f00994798b213b9240a00000f32b885a08d80ef8f0838a6fe99b000ee0f30f3400f09660f38803f8f23c00f21f835020002001723f8c40279134e9ac4c17b117d0d000000000001c5", 0x4f}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x3, 0xd, 0x82, 0x4, 0xa, 0x6, 0x6d, 0x6, 0x0, 0x7, 0xa, 0xfc, 0x0, 0x7, 0xc0, 0x5}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m17.675552664s ago: executing program 32 (id=204): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000180)={0x4}) ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, &(0x7f0000000200)) close(0xffffffffffffffff) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000640)="66ba2100ec430f00994798b213b9240a00000f32b885a08d80ef8f0838a6fe99b000ee0f30f3400f09660f38803f8f23c00f21f835020002001723f8c40279134e9ac4c17b117d0d000000000001c5", 0x4f}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x3, 0xd, 0x82, 0x4, 0xa, 0x6, 0x6d, 0x6, 0x0, 0x7, 0xa, 0xfc, 0x0, 0x7, 0xc0, 0x5}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15.101857728s ago: executing program 5 (id=405): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x93a, 0x3, 0x6361, 0x7, 0xffffffff, 0x7}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x40000000000008, 0x9, 0x6a32, 0x8, 0xffff}}]}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x200040f0}, 0x4890) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 12.891398717s ago: executing program 1 (id=413): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000010001"], 0x50) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0x0, 0xd, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xddccb000, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x81, 0x0, 0x44, 0xe, 0x0, 0x3}, {0x10b002, 0x2000, 0xc, 0xfd, 0x80, 0x0, 0x3}, {0x1000, 0x0, 0x0, 0x0, 0xff, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x1a, 0xa8}, {0x10000, 0xd000, 0x0, 0x2, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xfc, 0x86, 0xfe}, {0xeeee8000, 0x80a0000, 0xe, 0x0, 0x0, 0x0, 0xff, 0x80, 0x0, 0x4}, {0x4, 0x80a0000, 0x0, 0x82, 0x0, 0x10, 0x4, 0x6, 0x8}, {0x1000}, {0x1, 0xfffd}, 0x60010037, 0x0, 0x0, 0x10, 0x1, 0x0, 0x900, [0x0, 0x9, 0x10000, 0xd9c]}) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12.264319774s ago: executing program 5 (id=414): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000005500010026bdf0010000000007000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r0, @ANYBLOB="000203000d"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x10) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x140, 0x64, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0) timer_create(0x3, 0x0, &(0x7f0000bbdffc)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x51d}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='debugfs\x00', 0x0, 0x0) inotify_init() syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x60, 0x3, 0x7, {0x7, 0x3e, "3d91419d09"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 11.900226035s ago: executing program 1 (id=426): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x5e}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 9.796450848s ago: executing program 3 (id=417): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x22020600) unshare(0x2a020480) 9.788330439s ago: executing program 1 (id=428): r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) exit(0xffff) r1 = fanotify_init(0x0, 0x1000) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) getgid() read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) fanotify_mark(r1, 0x141, 0x40001029, r2, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r4, 0x0, 0x0) 9.76290747s ago: executing program 0 (id=419): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000040)={0x14, r4, 0x301, 0x0, 0x0, {0x4e}}, 0x14}}, 0x0) 8.956836157s ago: executing program 4 (id=421): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x7ffffffffd}, @flat=@binder={0x73622a85, 0x100a}, @flat=@binder={0x73622a85, 0x101}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000840)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x50, 0x0, &(0x7f0000000900)="6f74008a98488d4fa369ab20870f43d1fd83a89966174bbf500ea354f3483b1c3a10c9430de37206deebef12f2436e913cfdd7e74777a29d62a0191a392c6e6a9d2c62eaf7f4b7b18ade919fb419946c"}) 8.89706176s ago: executing program 4 (id=422): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 8.684909953s ago: executing program 0 (id=423): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x20, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 8.684640443s ago: executing program 5 (id=424): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000c74"], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0xa4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x3, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x7f, 0x7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.683971403s ago: executing program 3 (id=425): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x90, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) 8.617735667s ago: executing program 1 (id=427): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000e80)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000000000000b01000008000300", @ANYRES32=r2, @ANYBLOB="28005080140001004abee33957edf8aaae14574df400000005000200070000000800030006ac0f"], 0x44}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x82}, 0x0) 6.792819464s ago: executing program 4 (id=429): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSETS(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ff, 0x0, "5dee000000594000"}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000240)="01", 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r4, r4}, &(0x7f0000000480)=""/231, 0xe7, &(0x7f00000000c0)={&(0x7f0000000040)={'crc32c-generic\x00'}}) 6.650563352s ago: executing program 3 (id=439): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) 5.49068677s ago: executing program 4 (id=430): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r1, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r1, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) 4.372622465s ago: executing program 0 (id=431): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) keyctl$clear(0x7, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2714, 0x0, &(0x7f0000000000)) 4.371540675s ago: executing program 3 (id=432): syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x840000000002, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) connect$inet(r0, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) 4.369309145s ago: executing program 1 (id=442): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x90646}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x5}, @IFLA_BOND_USE_CARRIER={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4884}, 0x20000040) 4.310506938s ago: executing program 5 (id=433): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000180)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x40043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x3c, 0x0, @ib={0x1b, 0x0, 0x0, {"00001b00faf218d213185dbb00000040"}, 0xe, 0x19dff, 0x8}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x1000, @empty, 0x6}, {0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x400}, 0xffffffffffffffff, 0x43f3}}, 0x48) write$P9_RREAD(r1, &(0x7f00000004c0)={0xb, 0x75, 0x1}, 0xb) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 2.823677075s ago: executing program 0 (id=434): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x1, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000980)='.\x00', &(0x7f00000009c0)='ecryptfs\x00', 0x8080, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, 0x0, 0x20000004) ppoll(0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f0000000200)={[0xc5]}, 0x8) writev(r2, &(0x7f0000000140)=[{&(0x7f00000004c0)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0", 0x3a}], 0x1) syz_genetlink_get_family_id$tipc(0x0, r2) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0xd000, 0x10000, 0x3}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, 0x0) 2.812308446s ago: executing program 3 (id=435): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$uid(0x3, 0x0, 0x0) 2.707979102s ago: executing program 4 (id=436): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'lo\x00'}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="bd0c", 0x2, 0x4000000, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x24, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x4, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0x12, 0xee, 0x7, '\x00', 0xff}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0xc, 0x5, '\x00', 0x2}, {0x7, 0x1, 0x7, '\x00', 0xc2}, {0x2, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) 1.158063372s ago: executing program 5 (id=437): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setuid(0xee00) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) 1.157763572s ago: executing program 3 (id=438): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt(0xffffffffffffffff, 0xff, 0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[], 0x0) 853.368691ms ago: executing program 1 (id=440): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 852.61023ms ago: executing program 4 (id=441): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) 851.591941ms ago: executing program 0 (id=443): socket(0x400000000010, 0x3, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000280), &(0x7f0000000340)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x16, &(0x7f0000000380)=ANY=[], 0x0) 115.027954ms ago: executing program 5 (id=444): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) r3 = getpgid(r0) r4 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r3, r4, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) 0s ago: executing program 0 (id=445): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x32, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="13d9887cfd24", @val={@val={0x88a8, 0x5, 0x1, 0x3}, {0x8100, 0x5}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xe, @remote, @multicast2, @broadcast, @multicast2}}}}, 0x0) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.118' (ED25519) to the list of known hosts. [ 72.833862][ T4253] cgroup: Unknown subsys name 'net' [ 72.969440][ T4253] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.490667][ T4253] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 75.999867][ T4275] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.008229][ T4275] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.017538][ T4275] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.026449][ T4275] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.029007][ T4281] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.036565][ T4275] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.043503][ T4281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.053171][ T4275] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.056689][ T4281] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.069613][ T4275] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.071592][ T4281] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.079379][ T4275] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.085197][ T4281] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.092587][ T4275] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.098795][ T4281] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.108736][ T4275] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.120662][ T4275] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.121654][ T4282] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.130673][ T4275] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.139977][ T4282] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.143454][ T4275] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.150683][ T4282] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 76.157650][ T4275] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.166737][ T4282] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.172791][ T4275] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.185303][ T4283] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.192871][ T4283] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.221932][ T4281] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.230012][ T4281] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.239508][ T4281] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.607910][ T4277] chnl_net:caif_netlink_parms(): no params data found [ 76.722007][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.729938][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.752519][ T4277] device bridge_slave_0 entered promiscuous mode [ 76.789793][ T4266] chnl_net:caif_netlink_parms(): no params data found [ 76.807933][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.816530][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.825503][ T4277] device bridge_slave_1 entered promiscuous mode [ 76.839684][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 76.906023][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.919633][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 76.932532][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.000430][ T4277] team0: Port device team_slave_0 added [ 77.049209][ T4277] team0: Port device team_slave_1 added [ 77.055229][ T4265] chnl_net:caif_netlink_parms(): no params data found [ 77.068227][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.075547][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.083706][ T4266] device bridge_slave_0 entered promiscuous mode [ 77.126160][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.133638][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.145346][ T4266] device bridge_slave_1 entered promiscuous mode [ 77.178196][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.185579][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.212069][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.230871][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.238570][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.250033][ T4272] device bridge_slave_0 entered promiscuous mode [ 77.279720][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.286849][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.313835][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.325193][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.332831][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.341090][ T4272] device bridge_slave_1 entered promiscuous mode [ 77.348619][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.356220][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.364426][ T4274] device bridge_slave_0 entered promiscuous mode [ 77.384381][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.403391][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.418907][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.430222][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.439043][ T4274] device bridge_slave_1 entered promiscuous mode [ 77.500660][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.509061][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.517846][ T4265] device bridge_slave_0 entered promiscuous mode [ 77.530669][ T4277] device hsr_slave_0 entered promiscuous mode [ 77.540790][ T4277] device hsr_slave_1 entered promiscuous mode [ 77.564494][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.575792][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.585932][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.595837][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.604782][ T4265] device bridge_slave_1 entered promiscuous mode [ 77.617712][ T4266] team0: Port device team_slave_0 added [ 77.626606][ T4266] team0: Port device team_slave_1 added [ 77.637097][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.648262][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.713364][ T4265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.737975][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.745208][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.771404][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.791423][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.798454][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.824763][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.846382][ T4265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.859003][ T4274] team0: Port device team_slave_0 added [ 77.868035][ T4272] team0: Port device team_slave_0 added [ 77.898664][ T4274] team0: Port device team_slave_1 added [ 77.921041][ T4272] team0: Port device team_slave_1 added [ 77.942810][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.949811][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.976493][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.014886][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.022303][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.049046][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.062786][ T4265] team0: Port device team_slave_0 added [ 78.104522][ T4266] device hsr_slave_0 entered promiscuous mode [ 78.115202][ T4266] device hsr_slave_1 entered promiscuous mode [ 78.121869][ T4266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.130021][ T4266] Cannot create hsr debugfs directory [ 78.146092][ T4265] team0: Port device team_slave_1 added [ 78.152543][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.159551][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.186322][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.230696][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.238023][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.264193][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.279930][ T4274] device hsr_slave_0 entered promiscuous mode [ 78.287324][ T4274] device hsr_slave_1 entered promiscuous mode [ 78.294195][ T4283] Bluetooth: hci3: command 0x0409 tx timeout [ 78.300881][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.301826][ T4268] Bluetooth: hci4: command 0x0409 tx timeout [ 78.308677][ T4274] Cannot create hsr debugfs directory [ 78.315524][ T4271] Bluetooth: hci0: command 0x0409 tx timeout [ 78.320637][ T4282] Bluetooth: hci1: command 0x0409 tx timeout [ 78.371141][ T4282] Bluetooth: hci2: command 0x0409 tx timeout [ 78.388511][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.395661][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.425447][ T4265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.473576][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.480618][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.507004][ T4265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.574822][ T4265] device hsr_slave_0 entered promiscuous mode [ 78.582475][ T4265] device hsr_slave_1 entered promiscuous mode [ 78.589111][ T4265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.596901][ T4265] Cannot create hsr debugfs directory [ 78.612165][ T4272] device hsr_slave_0 entered promiscuous mode [ 78.619141][ T4272] device hsr_slave_1 entered promiscuous mode [ 78.626977][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.634732][ T4272] Cannot create hsr debugfs directory [ 78.865198][ T4277] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.904393][ T4277] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.927741][ T4277] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.947266][ T4277] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.985252][ T4274] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.003009][ T4274] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.012966][ T4274] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.046704][ T4274] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.109520][ T4266] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.120434][ T4266] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.132915][ T4266] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.158346][ T4266] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.279279][ T4265] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.292946][ T4265] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.332475][ T4265] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.349981][ T4265] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.363284][ T4272] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.375512][ T4272] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.387396][ T4272] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.399598][ T4272] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.439659][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.454092][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.527913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.538037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.550856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.560456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.587913][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.599178][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.637861][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.650022][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.660697][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.668185][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.677984][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.687866][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.696713][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.704003][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.728751][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.742150][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.750482][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.759490][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.773522][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.782978][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.790183][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.799531][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.809441][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.818782][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.827566][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.834825][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.854272][ T4265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.872964][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.884677][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.896279][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.905852][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.915812][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.925926][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.943808][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.957640][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.968761][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.978431][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.987977][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.006644][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.022632][ T4265] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.038509][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.046881][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.055869][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.065501][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.074844][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.083717][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.094981][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.103558][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.112472][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.125625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.135376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.144982][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.152257][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.167315][ T4274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.181707][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.200086][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.210682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.220239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.229604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.238551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.249662][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.258648][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.268541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.277170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.286047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.297209][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.304446][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.314834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.323874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.331996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.340863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.349638][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.356889][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.380209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.381405][ T4282] Bluetooth: hci4: command 0x041b tx timeout [ 80.388137][ T4271] Bluetooth: hci0: command 0x041b tx timeout [ 80.394529][ T4282] Bluetooth: hci3: command 0x041b tx timeout [ 80.399957][ T4271] Bluetooth: hci1: command 0x041b tx timeout [ 80.414834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.425131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.434799][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.442001][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.451110][ T4271] Bluetooth: hci2: command 0x041b tx timeout [ 80.451720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.466900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.494230][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.529202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.546199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.559145][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.566352][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.579194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.588924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.604324][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.611720][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.628156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.638878][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.654621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.667540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.680230][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.689973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.700414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.709162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.718186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.726709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.754566][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.765824][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.788924][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.805971][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.830802][ T4265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.882049][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.890872][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.907825][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.919566][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.937231][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.946878][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.958425][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.970742][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.986134][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.996850][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.010643][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.026414][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.036440][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.065946][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.102603][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.110801][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.142606][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.156198][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.169431][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.179648][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.228144][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.244996][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.277907][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.385137][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.406524][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.444678][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.463888][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.483425][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.501964][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.539269][ T4274] device veth0_vlan entered promiscuous mode [ 81.591852][ T4274] device veth1_vlan entered promiscuous mode [ 81.686869][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.700056][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.714918][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.727174][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.745683][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.767745][ T4274] device veth0_macvtap entered promiscuous mode [ 81.785716][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.796130][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.838169][ T4274] device veth1_macvtap entered promiscuous mode [ 81.858733][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.898893][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.932008][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.968057][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.989873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.999209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.035580][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.053195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.063454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.072543][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.083202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.096477][ T4277] device veth0_vlan entered promiscuous mode [ 82.114436][ T4274] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.125274][ T4274] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.136526][ T4274] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.145778][ T4274] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.160608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.169520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.178294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.187336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.196345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.204645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.219410][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.234257][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.258711][ T4277] device veth1_vlan entered promiscuous mode [ 82.279916][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.300644][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.324015][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.341770][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.381543][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.392600][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.419065][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.451338][ T4271] Bluetooth: hci1: command 0x040f tx timeout [ 82.457432][ T4271] Bluetooth: hci3: command 0x040f tx timeout [ 82.463913][ T4283] Bluetooth: hci0: command 0x040f tx timeout [ 82.463930][ T4282] Bluetooth: hci4: command 0x040f tx timeout [ 82.511123][ T4277] device veth0_macvtap entered promiscuous mode [ 82.531508][ T4282] Bluetooth: hci2: command 0x040f tx timeout [ 82.577328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.587591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.596933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.606486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.616525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.626640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.644992][ T4277] device veth1_macvtap entered promiscuous mode [ 82.656376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.675330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.690313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.699887][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.709109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.718596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.736579][ T4272] device veth0_vlan entered promiscuous mode [ 82.770604][ T4265] device veth0_vlan entered promiscuous mode [ 82.795274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.806865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.850347][ T4272] device veth1_vlan entered promiscuous mode [ 82.875932][ T4265] device veth1_vlan entered promiscuous mode [ 82.889388][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.902645][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.915356][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.926014][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.937268][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.949054][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.968502][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.985690][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.994300][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.002947][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.019617][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.028664][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.038327][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.056954][ T4277] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.070319][ T4277] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.080807][ T4277] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.095560][ T4277] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.128763][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.152521][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.166328][ T4272] device veth0_macvtap entered promiscuous mode [ 83.196213][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.211698][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.244794][ T4272] device veth1_macvtap entered promiscuous mode [ 83.259673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.270739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.285600][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.296468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.310151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.335249][ T4265] device veth0_macvtap entered promiscuous mode [ 83.404722][ T4265] device veth1_macvtap entered promiscuous mode [ 83.441084][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.458091][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.466915][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.476361][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.486111][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.497990][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.508475][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.519347][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.538979][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.583996][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.596499][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.613539][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.632725][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.655744][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.667544][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.687609][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.698354][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.713357][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.734527][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.756438][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.759392][ T4384] loop1: detected capacity change from 0 to 128 [ 83.772164][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.789250][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.799586][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.810997][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.823956][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.836419][ T4272] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.846545][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.860435][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.870625][ T4272] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.899222][ T4272] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.918836][ T4272] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.943111][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.955049][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.968379][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.979596][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.994933][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.007375][ T4266] device veth0_vlan entered promiscuous mode [ 84.035470][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.049200][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.060717][ T4384] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 53) [ 84.070189][ T4384] FAT-fs (loop1): Filesystem has been set read-only [ 84.077749][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.094015][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.104783][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.119174][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.133140][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.140571][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.157151][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.166947][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.183044][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.209451][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.230869][ T4265] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.244601][ T4265] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.256533][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.269367][ T4265] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.280390][ T4265] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.315232][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.336222][ T4266] device veth1_vlan entered promiscuous mode [ 84.530998][ T4282] Bluetooth: hci3: command 0x0419 tx timeout [ 84.537108][ T4282] Bluetooth: hci0: command 0x0419 tx timeout [ 84.543696][ T4268] Bluetooth: hci1: command 0x0419 tx timeout [ 84.543723][ T4271] Bluetooth: hci4: command 0x0419 tx timeout [ 84.563760][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.573489][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.585235][ T4266] device veth0_macvtap entered promiscuous mode [ 84.606846][ T4266] device veth1_macvtap entered promiscuous mode [ 84.613341][ T4271] Bluetooth: hci2: command 0x0419 tx timeout [ 84.616872][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.662759][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.670814][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.685058][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.722868][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.737928][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.747486][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.756331][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.774589][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.788742][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.819220][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.836094][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.846272][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.866192][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.877816][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.892770][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.905037][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.948209][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.972005][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.993789][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.011749][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.028104][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.038803][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.049668][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.060736][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.071985][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.083538][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.097137][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.141982][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.158877][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.173917][ T4349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.187649][ T4266] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.202770][ T4349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.212029][ T4266] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.231424][ T4266] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.244007][ T4266] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.291762][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.327025][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.355133][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.393943][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.534383][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.551490][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.585241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.639759][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.656855][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.679387][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.221131][ T4267] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 86.233095][ T4416] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.411127][ T4324] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 86.461127][ T4267] usb 4-1: Using ep0 maxpacket: 16 [ 86.480068][ T4267] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 86.501894][ T4267] usb 4-1: config 0 has no interface number 0 [ 86.520100][ T4267] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.534129][ T4267] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.544430][ T4267] usb 4-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 86.563877][ T4267] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.597960][ T4267] usb 4-1: config 0 descriptor?? [ 86.612419][ T4324] usb 5-1: Using ep0 maxpacket: 32 [ 86.642616][ T4324] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 86.661326][ T4324] usb 5-1: config 0 has no interface number 0 [ 86.690890][ T4424] loop0: detected capacity change from 0 to 16 [ 86.713103][ T4324] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 86.735843][ T4424] ======================================================= [ 86.735843][ T4424] WARNING: The mand mount option has been deprecated and [ 86.735843][ T4424] and is ignored by this kernel. Remove the mand [ 86.735843][ T4424] option from the mount to silence this warning. [ 86.735843][ T4424] ======================================================= [ 86.738095][ T4324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.771183][ C1] vkms_vblank_simulate: vblank timer overrun [ 86.847741][ T4424] erofs: Unknown parameter 'ªªªªªªªªªªª»†Ý`' [ 86.856925][ T125] cfg80211: failed to load regulatory.db [ 86.874608][ T4324] usb 5-1: Product: syz [ 86.878888][ T4324] usb 5-1: Manufacturer: syz [ 86.921094][ T4324] usb 5-1: SerialNumber: syz [ 86.937055][ T4373] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 86.949999][ T4324] usb 5-1: config 0 descriptor?? [ 86.979769][ T4324] smsc95xx v2.0.0 [ 87.104171][ T4426] loop2: detected capacity change from 0 to 1024 [ 87.153151][ T4426] EXT4-fs: Ignoring removed nobh option [ 87.158856][ T4426] EXT4-fs: inline encryption not supported [ 87.215927][ T4424] loop0: detected capacity change from 0 to 4096 [ 87.265732][ T4426] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 87.387079][ T4324] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 87.415488][ T4424] ntfs: volume version 3.1. [ 87.422924][ T4426] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 87.455974][ T4324] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 87.505049][ T4426] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3852: comm syz.2.15: Allocating blocks 385-513 which overlap fs metadata [ 87.614537][ T4426] EXT4-fs (loop2): pa ffff8880714f01c0: logic 16, phys. 129, len 24 [ 87.623424][ T4426] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4892: group 0, free 0, pa_free 8 [ 87.850032][ T4267] usbhid 4-1:0.1: can't add hid device: -71 [ 87.861191][ T4267] usbhid: probe of 4-1:0.1 failed with error -71 [ 87.890121][ T4267] usb 4-1: USB disconnect, device number 2 [ 88.004000][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 88.240131][ T4438] netlink: 'syz.2.18': attribute type 12 has an invalid length. [ 88.428373][ T4441] loop0: detected capacity change from 0 to 512 [ 88.470282][ T4441] EXT4-fs: Ignoring removed i_version option [ 88.509985][ T4441] EXT4-fs: Ignoring removed bh option [ 88.616730][ T4441] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 88.676721][ T4441] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.766534][ T4432] loop1: detected capacity change from 0 to 32768 [ 88.858536][ T4432] XFS (loop1): Mounting V5 Filesystem [ 88.939651][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18!!! [ 89.106834][ T4432] XFS (loop1): Ending clean mount [ 89.165308][ T4324] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71 [ 89.215008][ T4432] XFS (loop1): Quotacheck needed: Please wait. [ 89.224643][ T4324] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 89.321820][ T4324] usb 5-1: USB disconnect, device number 2 [ 89.359901][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 89.400406][ T4432] XFS (loop1): Quotacheck: Done. [ 89.571879][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 89.641176][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.981035][ T22] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 90.045588][ T4274] XFS (loop1): Unmounting Filesystem [ 90.181242][ T22] usb 1-1: Using ep0 maxpacket: 16 [ 90.199528][ T22] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.249797][ T22] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.281676][ T22] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 90.335602][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.377409][ T22] usb 1-1: Product: syz [ 90.382163][ T22] usb 1-1: Manufacturer: syz [ 90.387157][ T22] usb 1-1: SerialNumber: syz [ 90.502900][ T4478] loop2: detected capacity change from 0 to 2048 [ 90.564511][ T4478] loop2: p3 < > p4 < > [ 90.570349][ T4478] loop2: partition table partially beyond EOD, truncated [ 90.579545][ T4478] loop2: p3 start 4284289 is beyond EOD, truncated [ 90.614254][ T22] usb 1-1: 0:2 : does not exist [ 90.666834][ T22] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 90.748491][ T22] usb 1-1: USB disconnect, device number 2 [ 90.817419][ T4482] kvm: emulating exchange as write [ 91.007090][ T4373] udevd[4373]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 91.173554][ T4309] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 91.381227][ T4309] usb 2-1: Using ep0 maxpacket: 16 [ 91.388915][ T4309] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.451442][ T4309] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.474076][ T4309] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 91.542753][ T4309] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.565761][ T4490] binder: 4489:4490 ioctl c0306201 200000000240 returned -14 [ 91.601516][ T4309] usb 2-1: config 0 descriptor?? [ 91.680176][ T4494] loop2: detected capacity change from 0 to 1024 [ 91.697934][ T4492] overlayfs: statfs failed on './file0' [ 91.813830][ T4494] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 91.884841][ T4309] usbhid 2-1:0.0: can't add hid device: -71 [ 91.896843][ T4309] usbhid: probe of 2-1:0.0 failed with error -71 [ 92.028507][ T4309] usb 2-1: USB disconnect, device number 2 [ 92.170180][ T4502] netlink: 24 bytes leftover after parsing attributes in process `syz.4.35'. [ 92.193819][ T4494] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5933: Out of memory [ 92.221292][ T4494] EXT4-fs error (device loop2): ext4_dirty_inode:6137: inode #15: comm syz.2.31: mark_inode_dirty error [ 92.375823][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 93.232669][ T4509] loop4: detected capacity change from 0 to 32768 [ 93.328937][ T4509] XFS (loop4): Mounting V5 Filesystem [ 93.607411][ T4509] XFS (loop4): Ending clean mount [ 93.629472][ T4509] XFS (loop4): Quotacheck needed: Please wait. [ 93.715527][ T4509] XFS (loop4): Quotacheck: Done. [ 94.121300][ T4324] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 94.369808][ T4324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.391079][ T4324] usb 4-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 94.400481][ T4324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.534448][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 94.542828][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 94.551275][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 94.559670][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 94.568313][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 94.576826][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 94.585204][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 95.062969][ T4324] usb 4-1: config 0 descriptor?? [ 95.296440][ T4266] XFS (loop4): Unmounting Filesystem [ 95.459655][ T4324] usbhid 4-1:0.0: can't add hid device: -71 [ 95.474699][ T4324] usbhid: probe of 4-1:0.0 failed with error -71 [ 95.516136][ T4324] usb 4-1: USB disconnect, device number 3 [ 95.945431][ T4559] netlink: 24 bytes leftover after parsing attributes in process `syz.4.47'. [ 96.965082][ T4564] loop4: detected capacity change from 0 to 1024 [ 97.551360][ T4576] loop2: detected capacity change from 0 to 512 [ 97.573511][ T4576] EXT4-fs: Ignoring removed i_version option [ 97.590724][ T4576] EXT4-fs: Ignoring removed bh option [ 97.713107][ T4581] Bluetooth: MGMT ver 1.22 [ 98.736870][ T4576] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 98.789626][ T4576] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.040482][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 99.212780][ T4351] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 99.389498][ T4586] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.398296][ T4586] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.414679][ T4351] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.427677][ T4351] usb 4-1: config 0 has no interfaces? [ 99.433677][ T4351] usb 4-1: New USB device found, idVendor=05f6, idProduct=3201, bcdDevice= 0.00 [ 99.448437][ T4351] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.471860][ T4351] usb 4-1: config 0 descriptor?? [ 99.543799][ T4592] loop0: detected capacity change from 0 to 32768 [ 99.617204][ T4592] XFS (loop0): Mounting V5 Filesystem [ 99.753606][ T4592] XFS (loop0): Ending clean mount [ 99.832659][ T4592] XFS (loop0): Quotacheck needed: Please wait. [ 99.950538][ T4592] XFS (loop0): Quotacheck: Done. [ 100.319525][ T4277] XFS (loop0): Unmounting Filesystem [ 100.430639][ T4586] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.488489][ T4586] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.021128][ T4344] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 101.089916][ T4586] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.099112][ T4586] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.108340][ T4586] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.117350][ T4586] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.237904][ T4344] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.252327][ T4344] usb 1-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 101.269012][ T4344] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.296364][ T4344] usb 1-1: config 0 descriptor?? [ 101.356561][ T4596] netlink: 'syz.3.61': attribute type 9 has an invalid length. [ 101.373132][ T4596] netlink: 32 bytes leftover after parsing attributes in process `syz.3.61'. [ 101.398258][ T4596] Zero length message leads to an empty skb [ 101.412078][ T4309] usb 4-1: USB disconnect, device number 4 [ 101.614220][ T4344] usbhid 1-1:0.0: can't add hid device: -71 [ 101.627514][ T4344] usbhid: probe of 1-1:0.0 failed with error -71 [ 101.658248][ T4344] usb 1-1: USB disconnect, device number 3 [ 102.655628][ T4655] loop3: detected capacity change from 0 to 256 [ 102.730262][ T4655] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d) [ 103.844650][ T4682] Illegal XDP return value 655238697 on prog (id 3) dev syz_tun, expect packet loss! [ 104.311463][ T4699] loop0: detected capacity change from 0 to 8 [ 104.379340][ T4699] loop0: detected capacity change from 0 to 1024 [ 104.402925][ T4700] netlink: 24 bytes leftover after parsing attributes in process `syz.3.96'. [ 104.416447][ T4699] EXT4-fs: Ignoring removed orlov option [ 104.519731][ T4699] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 104.749873][ T4699] EXT4-fs error (device loop0): ext4_discard_preallocations:5122: comm syz.0.95: Error -117 loading buddy information for 4294949503 [ 104.784034][ T4699] EXT4-fs error (device loop0): ext4_free_blocks:6221: comm syz.0.95: Freeing blocks not in datazone - block = 147, count = 1 [ 105.547997][ T4710] netlink: 'syz.4.98': attribute type 27 has an invalid length. [ 105.581199][ T4710] netlink: 'syz.4.98': attribute type 4 has an invalid length. [ 105.588878][ T4710] netlink: 144 bytes leftover after parsing attributes in process `syz.4.98'. [ 105.677557][ T4699] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5933: Out of memory [ 105.741295][ T4699] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #15: comm syz.0.95: mark_inode_dirty error [ 105.803240][ T4699] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5933: Out of memory [ 105.858598][ T4699] EXT4-fs error (device loop0): ext4_punch_hole:4158: inode #15: comm syz.0.95: mark_inode_dirty error [ 106.851316][ T4277] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5933: Out of memory [ 106.882321][ T4277] EXT4-fs error (device loop0): ext4_dirty_inode:6137: inode #15: comm syz-executor: mark_inode_dirty error [ 106.903492][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 107.245131][ T4725] device syzkaller0 entered promiscuous mode [ 107.272411][ T4723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.628620][ T4730] netlink: 'syz.0.105': attribute type 1 has an invalid length. [ 108.602817][ T4758] binder: 4757:4758 ioctl c0306201 200000000b80 returned -14 [ 108.770317][ T4762] binder: BINDER_SET_CONTEXT_MGR already set [ 108.806581][ T4762] binder: 4761:4762 ioctl 4018620d 200000004a80 returned -16 [ 109.036629][ T4773] loop2: detected capacity change from 0 to 64 [ 109.101559][ T4772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.118'. [ 109.161369][ T27] audit: type=1800 audit(1769575426.990:2): pid=4773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.119" name="file1" dev="loop2" ino=22 res=0 errno=0 [ 109.220141][ T27] audit: type=1800 audit(1769575427.050:3): pid=4773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.119" name="file3" dev="loop2" ino=23 res=0 errno=0 [ 109.279185][ T4777] loop3: detected capacity change from 0 to 1024 [ 109.334594][ T4777] EXT4-fs: Ignoring removed orlov option [ 109.416352][ T4777] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 109.808826][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 110.015963][ T4801] loop3: detected capacity change from 0 to 256 [ 110.058697][ T4801] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 110.136289][ T27] audit: type=1326 audit(1769575427.970:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4800 comm="syz.3.126" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fad7839aeb9 code=0x0 [ 110.607823][ T4815] kvm: pic: level sensitive irq not supported [ 110.608305][ T4815] kvm: pic: single mode not supported [ 110.615088][ T4815] kvm: pic: level sensitive irq not supported [ 110.843735][ T4827] loop0: detected capacity change from 0 to 512 [ 110.890470][ T4827] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 110.926220][ T4827] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a003c11c, mo2=0002] [ 110.936322][ T4827] System zones: 1-12 [ 110.950682][ T4827] EXT4-fs error (device loop0): ext4_iget_extra_inode:4756: inode #15: comm syz.0.132: corrupted in-inode xattr [ 110.979396][ T4827] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.132: couldn't read orphan inode 15 (err -117) [ 111.003112][ T4827] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 111.138589][ T4827] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.132: Unrecognised inode hash code 4 [ 111.192459][ T4385] udevd[4385]: incorrect jbd checksum on /dev/loop0 [ 111.220585][ T4827] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.132: Corrupt directory, running e2fsck is recommended [ 111.268057][ T4827] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5933: Out of memory [ 111.339457][ T4827] EXT4-fs error (device loop0): ext4_dirty_inode:6137: inode #2: comm syz.0.132: mark_inode_dirty error [ 111.508361][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 111.773756][ T4850] fuse: Bad value for 'fd' [ 111.779808][ T4850] process 'syz.4.141' launched './file0' with NULL argv: empty string added [ 111.902603][ T4854] loop0: detected capacity change from 0 to 256 [ 111.955239][ T4854] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 111.988335][ T27] audit: type=1800 audit(1769575429.820:5): pid=4854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.142" name="file1" dev="loop0" ino=1048597 res=0 errno=0 [ 112.061646][ T27] audit: type=1800 audit(1769575429.850:6): pid=4854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.142" name="file1" dev="loop0" ino=1048597 res=0 errno=0 [ 113.159352][ T4853] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 113.198994][ T4853] FAT-fs (loop0): Filesystem has been set read-only [ 113.212520][ T4853] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 113.220733][ T4853] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 113.251277][ T4853] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 114.997104][ T4903] loop2: detected capacity change from 0 to 32768 [ 115.050043][ T4903] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.157 (4903) [ 115.154045][ T4903] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 115.223505][ T4903] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 115.256230][ T4903] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 115.311217][ T4903] BTRFS info (device loop2): force zstd compression, level 3 [ 115.322942][ T4903] BTRFS info (device loop2): turning on sync discard [ 115.336910][ T4903] BTRFS info (device loop2): force clearing of disk cache [ 115.363479][ T4921] netlink: 'syz.3.162': attribute type 4 has an invalid length. [ 115.374619][ T4903] BTRFS info (device loop2): enabling disk space caching [ 115.444658][ T4903] BTRFS info (device loop2): turning off discard [ 115.458910][ T4903] BTRFS info (device loop2): disk space caching is enabled [ 115.749731][ T4903] BTRFS info (device loop2): enabling ssd optimizations [ 115.823662][ T4903] BTRFS info (device loop2): rebuilding free space tree [ 116.032679][ T4903] BTRFS info (device loop2): disabling free space tree [ 116.062047][ T4903] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 116.088487][ T4903] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 116.666693][ T4950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.164'. [ 118.480071][ T4272] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 118.533185][ T4964] loop3: detected capacity change from 0 to 2048 [ 118.877897][ T4964] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 119.338323][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 119.785907][ T4309] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 121.306127][ T5011] sched: RT throttling activated [ 121.307529][ T4309] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 121.794411][ T5020] binder_alloc: 5019: binder_alloc_buf failed to map page at 200000ffd000 in userspace [ 123.276443][ T5030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.315354][ T5030] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 123.372850][ T5030] bond0: (slave gre0): Error -95 calling set_mac_address [ 123.567074][ T5037] bond0: (slave rose0): Enslaving as an active interface with an up link [ 124.347526][ T5054] fuse: Bad value for 'fd' [ 128.616347][ T5163] loop0: detected capacity change from 0 to 512 [ 128.640326][ T5163] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 128.693300][ T5163] EXT4-fs (loop0): orphan cleanup on readonly fs [ 128.700548][ T5163] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.201: bad orphan inode 15 [ 128.714995][ T5163] ext4_test_bit(bit=14, block=18) = 1 [ 128.720473][ T5163] is_bad_inode(inode)=0 [ 128.724763][ T5163] NEXT_ORPHAN(inode)=1023 [ 128.729138][ T5163] max_ino=32 [ 128.732447][ T5163] i_nlink=0 [ 128.740391][ T5163] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2915: inode #15: comm syz.0.201: corrupted xattr block 19 [ 128.755459][ T5163] EXT4-fs warning (device loop0): ext4_evict_inode:299: xattr delete (err -117) [ 128.765460][ T5163] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 129.845671][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 132.445770][ T27] audit: type=1326 audit(1769575450.280:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5201 comm="syz.4.212" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f45cd19aeb9 code=0x0 [ 132.584456][ T5210] loop0: detected capacity change from 0 to 128 [ 132.655364][ T5210] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 132.934472][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.941628][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.111748][ T5213] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 133.225234][ T5216] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 133.370619][ T5216] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 133.485177][ T4283] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 133.507418][ T4283] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 133.520717][ T4283] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 133.540579][ T4283] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 133.556270][ T4283] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 133.576279][ T4283] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 135.741057][ T4271] Bluetooth: hci2: command 0x0409 tx timeout [ 135.854997][ T5219] chnl_net:caif_netlink_parms(): no params data found [ 136.566646][ T5219] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.828939][ T5219] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.943686][ T5219] device bridge_slave_0 entered promiscuous mode [ 136.977058][ T5219] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.001080][ T5219] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.009422][ T5219] device bridge_slave_1 entered promiscuous mode [ 137.124890][ T5219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.173118][ T5219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.304351][ T5219] team0: Port device team_slave_0 added [ 137.442701][ T5219] team0: Port device team_slave_1 added [ 137.793904][ T5219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.821218][ T4283] Bluetooth: hci2: command 0x041b tx timeout [ 137.972085][ T5219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.531235][ T5219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.652988][ T5219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.713347][ T5219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.791699][ T5219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.162993][ T5219] device hsr_slave_0 entered promiscuous mode [ 139.177874][ T5219] device hsr_slave_1 entered promiscuous mode [ 139.192780][ T5219] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.213247][ T5219] Cannot create hsr debugfs directory [ 139.281454][ T5298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.232'. [ 139.911188][ T4271] Bluetooth: hci2: command 0x040f tx timeout [ 141.001074][ T5308] netlink: 32 bytes leftover after parsing attributes in process `syz.3.233'. [ 141.971238][ T4283] Bluetooth: hci2: command 0x0419 tx timeout [ 142.009356][ T5319] loop3: detected capacity change from 0 to 128 [ 142.076763][ T5319] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 142.130099][ T5319] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 142.240266][ T5219] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 142.288723][ T5219] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 142.352072][ T5219] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 142.414327][ T5219] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 142.741722][ T5336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.243'. [ 142.802573][ T5219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.911218][ T5137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 142.954685][ T5137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 143.053932][ T5219] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.267704][ T5144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 143.365452][ T5144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 143.498838][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.506126][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.824986][ T5144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 143.862039][ T5144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 143.927641][ T5144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 143.956747][ T5144] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.964086][ T5144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.979065][ T5144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 144.007055][ T5144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 144.050439][ T5144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 144.104512][ T5144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 144.125922][ T5144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 144.159592][ T27] audit: type=1326 audit(1769575461.990:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5356 comm="syz.3.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7839aeb9 code=0x7ffc0000 [ 144.174340][ T5358] syz.3.250 uses obsolete (PF_INET,SOCK_PACKET) [ 144.196996][ T5144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 144.232252][ T5144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 144.250363][ T27] audit: type=1326 audit(1769575462.000:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5356 comm="syz.3.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7839aeb9 code=0x7ffc0000 [ 144.288311][ T5149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 144.313640][ T5149] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 144.336759][ T27] audit: type=1326 audit(1769575462.000:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5356 comm="syz.3.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7839aeb9 code=0x7ffc0000 [ 144.376525][ T5219] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 144.400175][ T27] audit: type=1326 audit(1769575462.000:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5356 comm="syz.3.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fad7839aeb9 code=0x7ffc0000 [ 144.424156][ T5219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 144.474139][ T5131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 144.494289][ T5131] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 144.520487][ T27] audit: type=1326 audit(1769575462.000:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5356 comm="syz.3.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7839aeb9 code=0x7ffc0000 [ 144.579219][ T27] audit: type=1326 audit(1769575462.000:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5356 comm="syz.3.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7839aeb9 code=0x7ffc0000 [ 144.789993][ T27] audit: type=1326 audit(1769575462.000:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5356 comm="syz.3.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7839aeb9 code=0x7ffc0000 [ 144.861075][ T27] audit: type=1326 audit(1769575462.000:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5356 comm="syz.3.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7839aeb9 code=0x7ffc0000 [ 145.598572][ T27] audit: type=1326 audit(1769575462.010:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5356 comm="syz.3.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7839aeb9 code=0x7ffc0000 [ 146.156582][ T27] audit: type=1326 audit(1769575462.010:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5356 comm="syz.3.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fad7839aeb9 code=0x7ffc0000 [ 146.585031][ T5144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 146.599566][ T5144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 146.636950][ T5219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.446145][ T5405] loop3: detected capacity change from 0 to 512 [ 147.473333][ T5405] EXT4-fs: Ignoring removed i_version option [ 147.643029][ T5405] EXT4-fs: Ignoring removed bh option [ 147.663421][ T5405] EXT4-fs (loop3): Test dummy encryption mode enabled [ 148.837486][ T5405] EXT4-fs (loop3): 1 truncate cleaned up [ 148.852846][ T5405] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 149.677684][ T5405] EXT4-fs error (device loop3): ext4_validate_block_bitmap:420: comm syz.3.262: bg 0: bad block bitmap checksum [ 149.817102][ T5149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 149.833024][ T5149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 149.856431][ T5405] EXT4-fs (loop3): Remounting filesystem read-only [ 149.891670][ T5405] EXT4-fs error (device loop3): ext4_free_branches:1043: inode #13: block 234881024: comm syz.3.262: Read failure [ 149.933549][ T5131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 149.959109][ T5131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 150.009320][ T5219] device veth0_vlan entered promiscuous mode [ 150.022094][ T5131] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 150.034876][ T5405] EXT4-fs (loop3): Remounting filesystem read-only [ 150.061690][ T5131] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 150.117147][ T5219] device veth1_vlan entered promiscuous mode [ 150.225196][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 150.254903][ T4583] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 150.296520][ T4583] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 150.360505][ T4583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 150.420490][ T4583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 150.459603][ T5219] device veth0_macvtap entered promiscuous mode [ 150.485338][ T5219] device veth1_macvtap entered promiscuous mode [ 150.547109][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.580982][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.696256][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.827081][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.842684][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.711174][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.731364][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.782827][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.826118][ T5458] loop0: detected capacity change from 0 to 1024 [ 151.856416][ T5219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.961458][ T5144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 152.000236][ T5144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 152.058197][ T5144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 152.106685][ T5144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 152.244912][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.329348][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.418082][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.440983][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.460940][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.480932][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.493388][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.505492][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.519987][ T5219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.523782][ T4583] hfsplus: b-tree write err: -5, ino 3 [ 152.547820][ T5144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 152.562741][ T5144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 152.604733][ T5468] device syzkaller0 entered promiscuous mode [ 152.620688][ T5219] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.643735][ T5219] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.660513][ T5219] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.675232][ T5219] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.666922][ T4283] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 153.676646][ T4283] Bluetooth: hci1: Injecting HCI hardware error event [ 153.688034][ T4271] Bluetooth: hci1: hardware error 0x00 [ 153.896498][ T5131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.967110][ T5131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.068991][ T5131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.079956][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 154.094677][ T5131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.106976][ T5131] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 155.402426][ T5508] loop3: detected capacity change from 0 to 128 [ 155.823203][ T5508] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 155.836781][ T5508] hpfs: filesystem error: improperly stopped [ 155.843182][ T5508] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 155.851123][ T5508] hpfs: You really don't want any checks? You are crazy... [ 155.860806][ T5508] hpfs: hpfs_map_sector(): read error [ 155.866461][ T5508] hpfs: code page support is disabled [ 155.937813][ T4271] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 155.945997][ T5508] hpfs: hpfs_map_4sectors(): unaligned read [ 155.952619][ T5508] hpfs: hpfs_map_4sectors(): unaligned read [ 155.958807][ T5508] hpfs: filesystem error: unable to find root dir [ 157.779226][ T5512] netlink: 4 bytes leftover after parsing attributes in process `syz.5.206'. [ 157.789320][ T5512] device bridge_slave_1 left promiscuous mode [ 157.856829][ T5512] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.925949][ T5512] device bridge_slave_0 left promiscuous mode [ 157.970836][ T5512] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.116521][ T5516] loop0: detected capacity change from 0 to 1024 [ 158.177183][ T5516] hfsplus: unable to parse mount options [ 158.302160][ T5518] loop3: detected capacity change from 0 to 2048 [ 158.375703][ T5518] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 158.476191][ T5518] netlink: 12 bytes leftover after parsing attributes in process `syz.3.291'. [ 158.542053][ T5521] netlink: 104 bytes leftover after parsing attributes in process `syz.3.291'. [ 158.725318][ T27] kauditd_printk_skb: 35 callbacks suppressed [ 158.725335][ T27] audit: type=1326 audit(1769575476.560:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5522 comm="syz.0.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82f259aeb9 code=0x7ffc0000 [ 158.774889][ T27] audit: type=1326 audit(1769575476.560:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5522 comm="syz.0.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82f259aeb9 code=0x7ffc0000 [ 159.015942][ T27] audit: type=1326 audit(1769575476.590:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5522 comm="syz.0.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82f259aeb9 code=0x7ffc0000 [ 159.045728][ T27] audit: type=1326 audit(1769575476.590:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5522 comm="syz.0.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82f259aeb9 code=0x7ffc0000 [ 159.073400][ T27] audit: type=1326 audit(1769575476.590:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5522 comm="syz.0.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f82f259aeb9 code=0x7ffc0000 [ 159.919629][ T27] audit: type=1326 audit(1769575476.590:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5522 comm="syz.0.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82f259aeb9 code=0x7ffc0000 [ 160.027843][ T27] audit: type=1326 audit(1769575476.590:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5522 comm="syz.0.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82f259aeb9 code=0x7ffc0000 [ 160.081204][ T27] audit: type=1326 audit(1769575476.600:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5522 comm="syz.0.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82f259aeb9 code=0x7ffc0000 [ 160.195143][ T27] audit: type=1326 audit(1769575476.600:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5522 comm="syz.0.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82f259aeb9 code=0x7ffc0000 [ 160.272652][ T27] audit: type=1326 audit(1769575476.600:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5522 comm="syz.0.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f82f259aeb9 code=0x7ffc0000 [ 160.446629][ T5546] tipc: Enabling of bearer rejected, failed to enable media [ 160.462740][ T5549] device syzkaller0 entered promiscuous mode [ 160.483420][ T5547] loop0: detected capacity change from 0 to 1024 [ 165.551454][ T5594] binder_alloc: 5593: binder_alloc_buf, no vma [ 166.060431][ T5602] loop5: detected capacity change from 0 to 512 [ 166.949281][ T5602] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 166.986613][ T5602] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.066351][ T27] kauditd_printk_skb: 45 callbacks suppressed [ 167.066363][ T27] audit: type=1800 audit(1769575484.900:108): pid=5602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.308" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 167.539347][ T5219] EXT4-fs (loop5): unmounting filesystem. [ 169.715469][ T5629] tipc: Started in network mode [ 169.720420][ T5629] tipc: Node identity f6fb55eb16af, cluster identity 4711 [ 169.912747][ T5629] tipc: Enabled bearer , priority 0 [ 171.169094][ T4309] tipc: Node number set to 3763623403 [ 171.417086][ T5642] tipc: Resetting bearer [ 172.411815][ T5634] device syzkaller0 entered promiscuous mode [ 172.425055][ T5647] netlink: 256 bytes leftover after parsing attributes in process `syz.0.326'. [ 172.644104][ T5634] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 172.682739][ T5647] unsupported nlmsg_type 40 [ 173.367495][ T5628] tipc: Resetting bearer [ 173.452718][ T5628] tipc: Disabling bearer [ 174.001462][ T27] audit: type=1804 audit(1769575491.830:109): pid=5677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.334" name="/newroot/6/file1" dev="fuse" ino=1 res=1 errno=0 [ 174.049437][ T27] audit: type=1800 audit(1769575491.870:110): pid=5677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.334" name="/" dev="fuse" ino=1 res=0 errno=0 [ 174.077618][ T27] audit: type=1804 audit(1769575491.870:111): pid=5670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.334" name="/newroot/6/file1" dev="fuse" ino=1 res=1 errno=0 [ 174.108695][ T27] audit: type=1800 audit(1769575491.870:112): pid=5670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.334" name="/" dev="fuse" ino=1 res=0 errno=0 [ 175.576151][ T5693] netlink: 'syz.3.342': attribute type 1 has an invalid length. [ 175.738102][ T5700] bond1: (slave bridge1): making interface the new active one [ 175.768751][ T5700] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 175.811680][ T5693] device macvlan2 entered promiscuous mode [ 175.832383][ T5693] device bond1 entered promiscuous mode [ 175.838015][ T5693] device bridge1 entered promiscuous mode [ 175.852095][ T5693] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 175.860591][ T5693] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 176.004648][ T5693] device bond1 left promiscuous mode [ 176.066307][ T5704] 9pnet_fd: Insufficient options for proto=fd [ 176.084025][ T5693] device bridge1 left promiscuous mode [ 176.429132][ T5711] tipc: Started in network mode [ 176.437209][ T5711] tipc: Node identity 5e86bad8dbba, cluster identity 4711 [ 177.181191][ T5711] tipc: Enabled bearer , priority 0 [ 177.221536][ T5706] device syzkaller0 entered promiscuous mode [ 177.373742][ T5709] tipc: Resetting bearer [ 177.400325][ T5705] tipc: Resetting bearer [ 177.489008][ T5705] tipc: Disabling bearer [ 177.505534][ T27] audit: type=1804 audit(1769575495.340:113): pid=5724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.350" name="/newroot/65/file1" dev="fuse" ino=1 res=1 errno=0 [ 177.537427][ T27] audit: type=1800 audit(1769575495.340:114): pid=5724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.350" name="/" dev="fuse" ino=1 res=0 errno=0 [ 177.560500][ T5727] loop5: detected capacity change from 0 to 128 [ 177.568239][ T27] audit: type=1804 audit(1769575495.340:115): pid=5724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.350" name="/newroot/65/file1" dev="fuse" ino=1 res=1 errno=0 [ 177.653498][ T27] audit: type=1800 audit(1769575495.340:116): pid=5724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.350" name="/" dev="fuse" ino=1 res=0 errno=0 [ 177.759924][ T5729] syz.5.352: attempt to access beyond end of device [ 177.759924][ T5729] loop5: rw=2049, sector=145, nr_sectors = 264 limit=128 [ 177.980376][ T5151] kworker/u4:26: attempt to access beyond end of device [ 177.980376][ T5151] loop5: rw=1, sector=145, nr_sectors = 8 limit=128 [ 178.001218][ T5739] tipc: Started in network mode [ 178.017786][ T5739] tipc: Node identity 324db0dcb987, cluster identity 4711 [ 178.115887][ T5739] tipc: Enabled bearer , priority 0 [ 178.145787][ T5742] device syzkaller0 entered promiscuous mode [ 178.335289][ T5739] tipc: Resetting bearer [ 179.090794][ T5738] tipc: Resetting bearer [ 179.215963][ T5738] tipc: Disabling bearer [ 180.476133][ T5768] loop3: detected capacity change from 0 to 1024 [ 180.816231][ T5778] loop0: detected capacity change from 0 to 512 [ 180.846879][ T5778] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 181.118286][ T5778] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 181.334488][ T5792] capability: warning: `syz.4.373' uses deprecated v2 capabilities in a way that may be insecure [ 181.431074][ T5778] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 181.847897][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 182.747493][ T5804] tipc: Enabling of bearer rejected, failed to enable media [ 182.811625][ T5809] 9pnet: p9_errstr2errno: server reported unknown error [ 185.108365][ T5828] loop5: detected capacity change from 0 to 1024 [ 185.177885][ T5830] device syzkaller0 entered promiscuous mode [ 185.266290][ T5830] tipc: Enabled bearer , priority 0 [ 185.284190][ T5826] tipc: Resetting bearer [ 186.288051][ T5826] tipc: Disabling bearer [ 186.831229][ T4309] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 187.061161][ T4351] tipc: Node number set to 2345316572 [ 187.143354][ T4309] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 187.172092][ T4309] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 187.192979][ T4309] usb 1-1: config 0 has no interface number 0 [ 187.223273][ T4309] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 187.235049][ T4309] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.244909][ T4309] usb 1-1: Product: syz [ 187.249314][ T4309] usb 1-1: Manufacturer: syz [ 187.261210][ T4309] usb 1-1: SerialNumber: syz [ 187.270646][ T4309] usb 1-1: config 0 descriptor?? [ 187.709089][ T4309] usb 1-1: Found UVC 0.00 device syz (046d:0823) [ 188.566239][ T5869] loop5: detected capacity change from 0 to 8 [ 188.578520][ T5869] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 188.667974][ T4385] udevd[4385]: incorrect cramfs checksum on /dev/loop5 [ 188.723010][ T5869] cramfs: Error -3 while decompressing! [ 188.729090][ T5869] cramfs: ffffffff96d871e8(26)->ffff888051f43000(4096) [ 188.736953][ T5869] cramfs: Error 2 while decompressing! [ 188.743172][ T5869] cramfs: ffffffff96d87202(26)->ffff888051f44000(4096) [ 188.750301][ T5869] cramfs: Error -3 while decompressing! [ 188.756584][ T5869] cramfs: ffffffff96d8721c(16)->ffff888051f45000(4096) [ 188.765309][ T5869] cramfs: Error -3 while decompressing! [ 188.771315][ T5869] cramfs: ffffffff96d871e8(26)->ffff888051f43000(4096) [ 188.784415][ T27] audit: type=1800 audit(1769575506.620:117): pid=5869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.392" name="file2" dev="loop5" ino=348 res=0 errno=0 [ 188.892200][ T5871] netlink: 256 bytes leftover after parsing attributes in process `syz.1.394'. [ 189.030207][ T4309] usb 1-1: No valid video chain found. [ 189.070797][ T4309] usb 1-1: USB disconnect, device number 4 [ 189.175883][ T5873] loop3: detected capacity change from 0 to 4096 [ 191.783926][ T5873] EXT4-fs (loop3): Test dummy encryption mode enabled [ 191.954981][ T5873] EXT4-fs: failed to create workqueue [ 192.019867][ T5873] EXT4-fs (loop3): mount failed [ 192.858553][ T5898] device syzkaller0 entered promiscuous mode [ 192.949537][ T5898] tipc: Enabled bearer , priority 0 [ 192.958462][ T5897] tipc: Resetting bearer [ 193.656411][ T4316] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 193.704872][ T5897] tipc: Disabling bearer [ 193.861217][ T4316] usb 4-1: Using ep0 maxpacket: 32 [ 193.883458][ T4316] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.910358][ T5908] device syzkaller0 entered promiscuous mode [ 193.941445][ T4316] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.963116][ T4316] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 193.993768][ T4316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.019472][ T4316] usb 4-1: config 0 descriptor?? [ 194.071475][ T5908] tipc: Enabled bearer , priority 0 [ 194.092222][ T5906] tipc: Resetting bearer [ 194.379387][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.398007][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.811437][ T4316] usbhid 4-1:0.0: can't add hid device: -71 [ 195.817628][ T4316] usbhid: probe of 4-1:0.0 failed with error -71 [ 195.827174][ T5906] tipc: Disabling bearer [ 195.881157][ T4316] usb 4-1: USB disconnect, device number 5 [ 195.987044][ T5923] loop0: detected capacity change from 0 to 8 [ 195.996510][ T5923] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 196.027830][ T5923] cramfs: Error -3 while decompressing! [ 196.033810][ T5923] cramfs: ffffffff96d8b1e8(26)->ffff888071d37000(4096) [ 196.041116][ T5923] cramfs: Error 2 while decompressing! [ 196.046673][ T5923] cramfs: ffffffff96d8b202(26)->ffff88804bd4d000(4096) [ 196.053769][ T5923] cramfs: Error -3 while decompressing! [ 196.059416][ T5923] cramfs: ffffffff96d8b21c(16)->ffff8880513f2000(4096) [ 196.067088][ T5923] cramfs: Error -3 while decompressing! [ 196.073346][ T5923] cramfs: ffffffff96d8b1e8(26)->ffff888071d37000(4096) [ 196.095854][ T27] audit: type=1800 audit(1769575513.930:118): pid=5923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.409" name="file2" dev="loop0" ino=348 res=0 errno=0 [ 196.652724][ T4373] udevd[4373]: incorrect cramfs checksum on /dev/loop0 [ 196.875517][ T5928] netlink: 256 bytes leftover after parsing attributes in process `syz.4.410'. [ 196.955342][ T4373] udevd[4373]: incorrect cramfs checksum on /dev/loop0 [ 198.503164][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880741f7800: rx timeout, send abort [ 198.515088][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807574ac00: rx timeout, send abort [ 198.524347][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807574ac00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 199.013429][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880741f7800: abort rx timeout. Force session deactivation [ 199.455365][ T4351] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 199.982672][ T4351] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.997300][ T4351] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 200.011047][ T4351] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.032620][ T4351] usb 6-1: config 0 descriptor?? [ 200.213706][ T4351] usb 6-1: can't set config #0, error -71 [ 200.241148][ T4351] usb 6-1: USB disconnect, device number 2 [ 201.971643][ T4271] Bluetooth: hci4: command 0x0406 tx timeout [ 201.977864][ T4271] Bluetooth: hci3: command 0x0406 tx timeout [ 201.984067][ T4283] Bluetooth: hci0: command 0x0406 tx timeout [ 204.567508][ T5989] netlink: 'syz.4.430': attribute type 4 has an invalid length. [ 206.156941][ T6006] Error parsing options; rc = [-22] [ 313.880839][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 313.888004][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4277/1:b..l P4265/1:b..l [ 313.897731][ C0] (detected by 0, t=10503 jiffies, g=20417, q=135 ncpus=2) [ 313.905070][ C0] task:syz-executor state:R running task stack:22608 pid:4265 ppid:4263 flags:0x00004000 [ 313.917301][ C0] Call Trace: [ 313.920630][ C0] [ 313.923607][ C0] __schedule+0x11d1/0x40e0 [ 313.928209][ C0] ? __sched_text_start+0x8/0x8 [ 313.933111][ C0] ? mark_lock+0x94/0x320 [ 313.937495][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 313.943587][ C0] ? preempt_schedule+0xbc/0xd0 [ 313.948508][ C0] preempt_schedule_common+0x82/0xd0 [ 313.953848][ C0] preempt_schedule+0xbc/0xd0 [ 313.958666][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 313.964431][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 313.969862][ C0] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 313.975558][ C0] preempt_schedule_thunk+0x16/0x18 [ 313.980817][ C0] unwind_next_frame+0x1892/0x20b0 [ 313.985989][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 313.992197][ C0] ? stack_trace_save+0xf0/0xf0 [ 313.997102][ C0] arch_stack_walk+0x10c/0x140 [ 314.001946][ C0] stack_trace_save+0xa6/0xf0 [ 314.006686][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 314.011964][ C0] ? mark_lock+0x94/0x320 [ 314.016450][ C0] save_stack+0x121/0x230 [ 314.020832][ C0] ? __reset_page_owner+0x1a0/0x1a0 [ 314.026163][ C0] ? free_unref_page_prepare+0x8b4/0x9a0 [ 314.031945][ C0] ? free_unref_page_list+0xbb/0x8e0 [ 314.037285][ C0] ? release_pages+0x1fa6/0x2220 [ 314.042267][ C0] ? __pagevec_release+0x6d/0xe0 [ 314.047258][ C0] ? shmem_undo_range+0x7c2/0x20c0 [ 314.052431][ C0] ? shmem_evict_inode+0x25b/0xa80 [ 314.057591][ C0] ? evict+0x4c9/0x8d0 [ 314.061723][ C0] ? do_unlinkat+0x388/0x580 [ 314.066361][ C0] ? __x64_sys_unlink+0x45/0x50 [ 314.071280][ C0] ? do_syscall_64+0x4c/0xa0 [ 314.075923][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 314.082052][ C0] ? page_ext_get+0x1de/0x2a0 [ 314.086872][ C0] __reset_page_owner+0x51/0x1a0 [ 314.091871][ C0] free_unref_page_prepare+0x8b4/0x9a0 [ 314.097399][ C0] free_unref_page_list+0xbb/0x8e0 [ 314.102584][ C0] release_pages+0x1fa6/0x2220 [ 314.107423][ C0] ? lru_cache_disable+0x30/0x30 [ 314.112413][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 314.117744][ C0] __pagevec_release+0x6d/0xe0 [ 314.122573][ C0] shmem_undo_range+0x7c2/0x20c0 [ 314.127571][ C0] ? shmem_truncate_range+0xb0/0xb0 [ 314.132847][ C0] ? do_raw_spin_lock+0x128/0x2f0 [ 314.137924][ C0] ? __rwlock_init+0x140/0x140 [ 314.142730][ C0] shmem_evict_inode+0x25b/0xa80 [ 314.147728][ C0] ? inode_wait_for_writeback+0x1df/0x220 [ 314.153512][ C0] ? shmem_free_in_core_inode+0xb0/0xb0 [ 314.159104][ C0] ? do_raw_spin_lock+0x128/0x2f0 [ 314.164171][ C0] ? bit_waitqueue+0x30/0x30 [ 314.168827][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 314.174077][ C0] ? shmem_free_in_core_inode+0xb0/0xb0 [ 314.179681][ C0] evict+0x4c9/0x8d0 [ 314.183638][ C0] ? dput+0x37/0x1d0 [ 314.187593][ C0] ? proc_nr_inodes+0x2f0/0x2f0 [ 314.192488][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 314.197910][ C0] ? _raw_spin_unlock+0x24/0x40 [ 314.202833][ C0] ? iput+0x768/0x980 [ 314.206965][ C0] do_unlinkat+0x388/0x580 [ 314.211433][ C0] ? fsnotify_link_count+0xf0/0xf0 [ 314.216602][ C0] ? getname_flags+0x206/0x500 [ 314.221437][ C0] __x64_sys_unlink+0x45/0x50 [ 314.226165][ C0] do_syscall_64+0x4c/0xa0 [ 314.230713][ C0] ? clear_bhb_loop+0x60/0xb0 [ 314.235552][ C0] ? clear_bhb_loop+0x60/0xb0 [ 314.240373][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 314.246337][ C0] RIP: 0033:0x7fad78399fa7 [ 314.250819][ C0] RSP: 002b:00007ffd1a01dcb8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 314.259282][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fad78399fa7 [ 314.267300][ C0] RDX: 00007ffd1a01dce0 RSI: 00007ffd1a01dd70 RDI: 00007ffd1a01dd70 [ 314.275307][ C0] RBP: 00007ffd1a01dd70 R08: 00007ffd1a01ed70 R09: 00000000ffffffff [ 314.283316][ C0] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffd1a01ee00 [ 314.291444][ C0] R13: 00007fad7840471f R14: 000000000003252c R15: 00007ffd1a01ee40 [ 314.299475][ C0] [ 314.302553][ C0] task:syz-executor state:R running task stack:20208 pid:4277 ppid:4260 flags:0x00004000 [ 314.313406][ C0] Call Trace: [ 314.316739][ C0] [ 314.319732][ C0] __schedule+0x11d1/0x40e0 [ 314.324309][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 314.330349][ C0] ? __sched_text_start+0x8/0x8 [ 314.335251][ C0] ? lock_chain_count+0x20/0x20 [ 314.340153][ C0] ? do_sys_openat2+0x150/0x4b0 [ 314.345065][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 314.351192][ C0] ? preempt_schedule_irq+0xb0/0x160 [ 314.356531][ C0] preempt_schedule_irq+0xbb/0x160 [ 314.361698][ C0] ? preempt_schedule_notrace+0x120/0x120 [ 314.367507][ C0] ? rcu_irq_exit_check_preempt+0xdb/0x210 [ 314.373459][ C0] irqentry_exit+0x63/0x70 [ 314.377924][ C0] asm_sysvec_reschedule_ipi+0x16/0x20 [ 314.383438][ C0] RIP: 0010:inode_permission+0xf9/0x480 [ 314.389066][ C0] Code: c0 0f 85 db 02 00 00 41 8b 2f 31 ff 89 ee e8 0e 5e 9e ff 85 ed 0f 85 99 01 00 00 e8 a1 5a 9e ff 4c 89 f7 89 de 48 83 c4 10 5b <41> 5c 41 5d 41 5e 41 5f 5d e9 79 72 e7 01 4d 8d 66 28 4c 89 e0 48 [ 314.408811][ C0] RSP: 0018:ffffc90003f87810 EFLAGS: 00000282 [ 314.414928][ C0] RAX: ffffffff81e417cf RBX: ffffc90003f87c50 RCX: ffff88802fffd940 [ 314.422944][ C0] RDX: 0000000000000000 RSI: 0000000000000081 RDI: ffff8880689333c0 [ 314.430981][ C0] RBP: 0000000000000000 R08: ffff88802fffd940 R09: 0000000000000002 [ 314.439167][ C0] R10: 000000000000002f R11: 0000000000000000 R12: 1ffff1100d126678 [ 314.447182][ C0] R13: ffffffff8c9d7460 R14: ffff8880689333c0 R15: ffff88806893340c [ 314.455222][ C0] ? inode_permission+0xef/0x480 [ 314.460241][ C0] link_path_walk+0x280/0xe70 [ 314.465075][ C0] ? handle_lookup_down+0x130/0x130 [ 314.470338][ C0] path_openat+0x286/0x2ee0 [ 314.474909][ C0] ? verify_lock_unused+0x140/0x140 [ 314.480255][ C0] ? do_syscall_64+0x4c/0xa0 [ 314.484905][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 314.491027][ C0] ? do_filp_open+0x430/0x430 [ 314.495779][ C0] do_filp_open+0x1f1/0x430 [ 314.500342][ C0] ? vfs_tmpfile+0x480/0x480 [ 314.504997][ C0] ? _raw_spin_unlock+0x24/0x40 [ 314.509927][ C0] ? alloc_fd+0x58f/0x630 [ 314.514366][ C0] do_sys_openat2+0x150/0x4b0 [ 314.519110][ C0] ? kmem_cache_free+0xf7/0x290 [ 314.524021][ C0] ? do_sys_open+0xe0/0xe0 [ 314.528495][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 314.534547][ C0] ? lock_chain_count+0x20/0x20 [ 314.539458][ C0] __x64_sys_openat+0x135/0x160 [ 314.544381][ C0] do_syscall_64+0x4c/0xa0 [ 314.548855][ C0] ? clear_bhb_loop+0x60/0xb0 [ 314.553580][ C0] ? clear_bhb_loop+0x60/0xb0 [ 314.558347][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 314.564285][ C0] RIP: 0033:0x7f82f259a1dc [ 314.568753][ C0] RSP: 002b:00007fff69071920 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 314.577212][ C0] RAX: ffffffffffffffda RBX: 00007f82f260471f RCX: 00007f82f259a1dc [ 314.585229][ C0] RDX: 0000000000090800 RSI: 00007fff69072ad0 RDI: 00000000ffffff9c [ 314.593245][ C0] RBP: 00007fff69072abc R08: 0000000000000000 R09: 0000000000000000 [ 314.601255][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 00007fff69072ad0 [ 314.609275][ C0] R13: 00007f82f260471f R14: 0000000000032f4a R15: 00007fff69072b10 [ 314.617390][ C0] [ 314.620448][ C0] rcu: rcu_preempt kthread starved for 10573 jiffies! g20417 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 314.631691][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 314.641694][ C0] rcu: RCU grace-period kthread stack dump: [ 314.647631][ C0] task:rcu_preempt state:R running task stack:26416 pid:16 ppid:2 flags:0x00004000 [ 314.658569][ C0] Call Trace: [ 314.661886][ C0] [ 314.664920][ C0] __schedule+0x11d1/0x40e0 [ 314.669483][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 314.675438][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 314.681388][ C0] ? __sched_text_start+0x8/0x8 [ 314.686293][ C0] ? __mod_timer+0x91e/0xd00 [ 314.690944][ C0] schedule+0xb9/0x180 [ 314.695057][ C0] schedule_timeout+0x184/0x2d0 [ 314.699974][ C0] ? console_conditional_schedule+0x40/0x40 [ 314.706190][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 314.712135][ C0] ? update_process_times+0x1b0/0x1b0 [ 314.717595][ C0] ? prepare_to_swait_event+0x335/0x350 [ 314.723203][ C0] rcu_gp_fqs_loop+0x303/0x1340 [ 314.728105][ C0] ? rcu_gp_kthread+0x3b0/0x3b0 [ 314.733093][ C0] ? dump_blkd_tasks+0x810/0x810 [ 314.738088][ C0] ? rcu_gp_init+0x14e0/0x14e0 [ 314.742898][ C0] ? rcu_gp_cleanup+0xb41/0xc90 [ 314.747808][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 314.753052][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 314.758312][ C0] rcu_gp_kthread+0x99/0x3b0 [ 314.763120][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 314.768288][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 314.774235][ C0] ? __kthread_parkme+0x162/0x1c0 [ 314.779323][ C0] kthread+0x29d/0x330 [ 314.783446][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 314.788607][ C0] ? kthread_blkcg+0xd0/0xd0 [ 314.793255][ C0] ret_from_fork+0x1f/0x30 [ 314.797739][ C0] [ 314.800794][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 314.807168][ C0] Sending NMI from CPU 0 to CPUs 1: [ 314.812512][ C1] NMI backtrace for cpu 1 [ 314.812530][ C1] CPU: 1 PID: 6035 Comm: syz.5.444 Not tainted syzkaller #0 [ 314.812546][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 314.812556][ C1] RIP: 0010:rcu_read_lock_held+0x0/0x40 [ 314.812581][ C1] Code: a0 8f e8 83 f7 67 00 eb cf 90 0f b6 05 c1 5d b4 0c c3 0f 1f 84 00 00 00 00 00 e8 6b 3e 01 00 e9 56 42 01 00 66 0f 1f 44 00 00 <53> e8 2a f4 c0 08 85 c0 74 26 31 db e8 9f 0c 01 00 84 c0 74 20 e8 [ 314.812595][ C1] RSP: 0018:ffffc900001e0c28 EFLAGS: 00000046 [ 314.812610][ C1] RAX: ffffffff8156129d RBX: 0000000000000001 RCX: 0000000000010000 [ 314.812622][ C1] RDX: ffff888028893b80 RSI: 0000000000000000 RDI: 0000000000000000 [ 314.812632][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: 1ffffffff215e648 [ 314.812644][ C1] R10: dffffc0000000000 R11: fffffbfff215e649 R12: ffff888077601be8 [ 314.812656][ C1] R13: ffff888055b5c780 R14: ffff88802a4cdf78 R15: 0000000000000001 [ 314.812668][ C1] FS: 00007fbcdff866c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 314.812683][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 314.812694][ C1] CR2: 00007f457bbe8600 CR3: 00000000563a3000 CR4: 00000000003506e0 [ 314.812709][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 314.812718][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 314.812729][ C1] Call Trace: [ 314.812736][ C1] [ 314.812741][ C1] pid_task+0x9d/0x140 [ 314.812770][ C1] send_sigqueue+0x137/0x610 [ 314.812796][ C1] ? send_sigqueue+0x8d/0x610 [ 314.812821][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 314.812841][ C1] posix_timer_fn+0x16a/0x3d0 [ 314.812862][ C1] __hrtimer_run_queues+0x560/0xd70 [ 314.812880][ C1] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 314.812901][ C1] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 314.812927][ C1] ? common_timer_wait_running+0x10/0x10 [ 314.812949][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 314.812972][ C1] hrtimer_interrupt+0x3c5/0x9c0 [ 314.813003][ C1] __sysvec_apic_timer_interrupt+0x153/0x5a0 [ 314.813030][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 314.813057][ C1] [ 314.813061][ C1] [ 314.813066][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 314.813087][ C1] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 314.813103][ C1] Code: 00 00 00 66 90 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 ae 54 2e f7 48 89 df e8 f6 1c 2f f7 e8 71 6d 52 f7 fb bf 01 00 00 00 96 7d 22 f7 65 8b 05 57 01 cc 75 85 c0 74 02 5b c3 e8 a4 15 ca [ 314.813116][ C1] RSP: 0018:ffffc900039d7b98 EFLAGS: 00000282 [ 314.813128][ C1] RAX: 42ed5b8d6f259800 RBX: ffff888078735c80 RCX: 42ed5b8d6f259800 [ 314.813141][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c1220 RDI: 0000000000000001 [ 314.813152][ C1] RBP: ffff888078736118 R08: ffff888078735c83 R09: 1ffff1100f0e6b90 [ 314.813165][ C1] R10: dffffc0000000000 R11: ffffed100f0e6b91 R12: 1ffff1100f0e6c23 [ 314.813177][ C1] R13: 0000000000000021 R14: dffffc0000000000 R15: 0000000000000000 [ 314.813195][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 314.813210][ C1] get_signal+0x1163/0x1350 [ 314.813245][ C1] arch_do_signal_or_restart+0xc4/0x1350 [ 314.813271][ C1] ? __ia32_sys_rt_sigreturn+0x619/0x760 [ 314.813294][ C1] ? load_gs_index+0x130/0x130 [ 314.813314][ C1] ? get_sigframe_size+0x10/0x10 [ 314.813345][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 314.813372][ C1] exit_to_user_mode_loop+0x70/0x110 [ 314.813398][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 314.813423][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 314.813439][ C1] do_syscall_64+0x58/0xa0 [ 314.813459][ C1] ? clear_bhb_loop+0x60/0xb0 [ 314.813477][ C1] ? clear_bhb_loop+0x60/0xb0 [ 314.813497][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 314.813516][ C1] RIP: 0033:0x7fbcdf19aeb7 [ 314.813529][ C1] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 314.813542][ C1] RSP: 002b:00007fbcdff860e8 EFLAGS: 00000246 [ 314.813555][ C1] RAX: 00000000000000ca RBX: 00007fbcdf415fa8 RCX: 00007fbcdf19aeb9 [ 314.813566][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbcdf415fa8 [ 314.813577][ C1] RBP: 00007fbcdf415fa0 R08: 0000000000000000 R09: 0000000000000000 [ 314.813587][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.813597][ C1] R13: 00007fbcdf416038 R14: 00007ffc359cca50 R15: 00007ffc359ccb38 [ 314.813616][ C1] [ 315.553920][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 315.560439][ T1267] ieee802154 phy1 wpan1: encryption failed: -22