last executing test programs: 16.451212448s ago: executing program 2 (id=303): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x73) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 16.025684558s ago: executing program 2 (id=309): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_open_pts(0xffffffffffffffff, 0x2) ioctl$TIOCSBRK(r3, 0x5427) inotify_init1(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r4, 0x5406, &(0x7f0000000200)={0xff08, 0x0, 0x0, 0x5, 0xff, "5f330000d38765eb"}) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x13) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000280)) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) 12.554772956s ago: executing program 2 (id=314): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000001080)={0x0, 0x0}) mkdirat(0xffffffffffffffff, 0x0, 0x10) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r4, 0x40485404, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x0, 0x800}}) syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 11.674766497s ago: executing program 2 (id=318): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000380), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f00000003c0)='./file0/../file0/../file0/../file0\x00') 11.416509048s ago: executing program 2 (id=321): syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000140)='./file0\x00', 0x100420, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES32, @ANYRES16, @ANYBLOB='\x00\v', @ANYRES64, @ANYBLOB="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"/531, @ANYRESDEC], 0x2, 0x1cb, &(0x7f0000000300)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0b000080976b6408686030001400018099"], 0x38}], 0x1}, 0x0) 10.983680369s ago: executing program 2 (id=324): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000000180), 0xfc, 0x581, &(0x7f0000000940)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) lseek(0xffffffffffffffff, 0xfffffffffffffffc, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00feff6a356eb1df97bf98557fa8008050cb000000000000ffdd3c2f542693ce2a002810e0361f366e00000000da", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x15) 10.493856399s ago: executing program 32 (id=324): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000000180), 0xfc, 0x581, &(0x7f0000000940)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) lseek(0xffffffffffffffff, 0xfffffffffffffffc, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00feff6a356eb1df97bf98557fa8008050cb000000000000ffdd3c2f542693ce2a002810e0361f366e00000000da", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x15) 7.204928086s ago: executing program 4 (id=333): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d2, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 6.974401087s ago: executing program 4 (id=335): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x22, 0x4, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @remote, {[@timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote, 0x8}, {@broadcast}, {@empty}, {@private=0xa010100, 0x3}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote, 0x4}, {@multicast2}, {@private=0xa0100ff}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2, 0x8}]}, @noop, @noop, @noop]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.880981567s ago: executing program 0 (id=336): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$unix(r0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000400)=[@text64={0x40, 0x0}], 0x1, 0x80, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) eventfd(0x4) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000000000007"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.286818098s ago: executing program 0 (id=338): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000000180), 0xfc, 0x581, &(0x7f0000000940)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x2) getdents(r0, 0x0, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x1, 0x0, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x15) 6.167600568s ago: executing program 1 (id=339): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000013004f0a000200"/20, @ANYRES32=r3, @ANYBLOB="00000000000000000800cfffecc507006c001a8054"], 0x94}}, 0x8850) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8f8, 0x0) 5.916008258s ago: executing program 4 (id=340): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000202010000000000000000000a0000003c0002800c00028004000100000000002c00018014000300fe800000000000000000000000000000140004"], 0x50}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3b}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000001000000000000", 0x1c) mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) r6 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1200, 0x0, 0x3) 5.639908689s ago: executing program 3 (id=342): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2, 0x9800}}, 0x2e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000080)) 5.454698429s ago: executing program 3 (id=343): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffe, 0x0, 0x3}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r2 = dup(r1) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x80, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}}}}}, 0x0) socket$inet6(0xa, 0x0, 0x6) 5.21840517s ago: executing program 1 (id=344): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) chdir(0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', 0x0) 5.20970131s ago: executing program 0 (id=345): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xb, &(0x7f0000000600)=ANY=[@ANYRES16=r3, @ANYRESDEC, @ANYRES16=r1], 0x0, 0xc1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 4.857267801s ago: executing program 1 (id=346): socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4040880) close(r0) 4.856480661s ago: executing program 4 (id=347): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 3.994391873s ago: executing program 3 (id=348): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0xd2, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffbfff00000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22", @ANYRES16=0x0, @ANYRESOCT], 0x0) 3.758367213s ago: executing program 3 (id=349): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x22, 0x4, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @remote, {[@timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote, 0x8}, {@broadcast}, {@empty}, {@private=0xa010100, 0x3}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote, 0x4}, {@multicast2}, {@private=0xa0100ff}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2, 0x8}]}, @noop, @noop, @noop]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.486697663s ago: executing program 0 (id=350): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x62, 0x5, 0x448, 0x188, 0x0, 0xffffffff, 0x2b8, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @loopback, @remote, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @port=0x4e21}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00', {}, {}, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00'}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r4, 0x400448c8, &(0x7f0000000000)) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) 3.296893254s ago: executing program 4 (id=351): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x0, 0x0, 0x0, {{@in=@remote, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, {0x80000, 0x0, 0x0, 0x800}}}, 0xb8}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f08", 0xd}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) 3.238338244s ago: executing program 4 (id=352): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) timer_create(0x0, &(0x7f0000000000)={0x0, 0x3a, 0x4, @thr={&(0x7f0000000300)="d604baefb7e63f498d19731bf2a5e7ae32eb85d1542f0317bac35c9ef99d13df58a8243acb4d551c2ecbc1c45264eae98f439b13d92aa1c6efe822de4dd61538ecb5e80ec7848f34a2adcddc2eb61443e1edde09e1d45744e0468d59d5e2", 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendto$inet6(r6, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) recvmsg(r5, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/45, 0x2d}, 0x20) 2.934691425s ago: executing program 3 (id=353): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000100850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) epoll_create1(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') lseek(r2, 0x8000, 0x1) r3 = gettid() r4 = eventfd2(0x0, 0x0) r5 = dup(r4) read$FUSE(r5, &(0x7f0000000a40)={0x2020}, 0x2020) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r7, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) waitid(0x0, 0x0, 0x0, 0x1000000, 0x0) 1.178007158s ago: executing program 1 (id=354): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000000180), 0xfc, 0x581, &(0x7f0000000940)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000400)={0x1c}, 0x1c}}, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x2) getdents(r0, 0x0, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x1, 0x0, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x15) 1.176717958s ago: executing program 0 (id=355): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="06000000040000000800000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000180)='./file1\x00', 0x8000, &(0x7f0000000400)=ANY=[@ANYRES64=0x0], 0x1, 0x14fe, &(0x7f0000001580)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) chdir(&(0x7f0000000000)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x84) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xfdef) 764.428349ms ago: executing program 0 (id=356): syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x128}, 0x1, 0x0, 0x0, 0x4048002}, 0x40000) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000007c0)='ns/pid_for_children\x00') bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b7227", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r8, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000"], 0x48}}, 0x0) 229.36413ms ago: executing program 3 (id=357): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000980)='./file1\x00', 0x8002e, &(0x7f0000000200)={[{@sysvgroups}, {@lazytime}, {@lazytime}, {@prjquota}, {@dax_never}, {@quota}], [{@uid_lt}, {@fowner_eq}]}, 0x0, 0x469, &(0x7f0000000300)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x5, 0x42, 0x40, '\x00', 0x8}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000059e000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x0, &(0x7f0000000780)=[@flags={0x3, 0x200}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 224.60525ms ago: executing program 1 (id=358): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 0s ago: executing program 1 (id=359): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xb, &(0x7f0000000600)=ANY=[@ANYRES16=r4, @ANYRESDEC, @ANYRES16=r1], 0x0, 0xc1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.13' (ED25519) to the list of known hosts. [ 58.795883][ T4157] cgroup: Unknown subsys name 'net' [ 58.904622][ T4157] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.370354][ T4157] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.797645][ T4168] chnl_net:caif_netlink_parms(): no params data found [ 61.829650][ T4176] chnl_net:caif_netlink_parms(): no params data found [ 61.872727][ T4179] chnl_net:caif_netlink_parms(): no params data found [ 61.977083][ T4168] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.985116][ T4168] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.993161][ T4168] device bridge_slave_0 entered promiscuous mode [ 62.015065][ T4168] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.022195][ T4168] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.030697][ T4168] device bridge_slave_1 entered promiscuous mode [ 62.061918][ T4167] chnl_net:caif_netlink_parms(): no params data found [ 62.111664][ T4168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.121754][ T4176] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.128987][ T4176] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.137718][ T4176] device bridge_slave_0 entered promiscuous mode [ 62.146629][ T4176] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.153704][ T4176] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.161884][ T4176] device bridge_slave_1 entered promiscuous mode [ 62.169180][ T4169] chnl_net:caif_netlink_parms(): no params data found [ 62.179036][ T4179] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.186358][ T4179] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.194338][ T4179] device bridge_slave_0 entered promiscuous mode [ 62.210682][ T4168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.248389][ T4179] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.255564][ T4179] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.263403][ T4179] device bridge_slave_1 entered promiscuous mode [ 62.287997][ T4176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.320409][ T4168] team0: Port device team_slave_0 added [ 62.328074][ T4176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.352949][ T4168] team0: Port device team_slave_1 added [ 62.367639][ T4179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.379970][ T4179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.429346][ T4167] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.436554][ T4167] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.445124][ T4167] device bridge_slave_0 entered promiscuous mode [ 62.456566][ T4167] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.463631][ T4167] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.472177][ T4167] device bridge_slave_1 entered promiscuous mode [ 62.488878][ T4176] team0: Port device team_slave_0 added [ 62.527605][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.534795][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.561097][ T4168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.575251][ T4176] team0: Port device team_slave_1 added [ 62.581563][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.588796][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.614824][ T4168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.628432][ T4179] team0: Port device team_slave_0 added [ 62.644449][ T4167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.653604][ T4169] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.661966][ T4169] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.670036][ T4169] device bridge_slave_0 entered promiscuous mode [ 62.698632][ T4179] team0: Port device team_slave_1 added [ 62.707478][ T4167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.716768][ T4169] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.723853][ T4169] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.732627][ T4169] device bridge_slave_1 entered promiscuous mode [ 62.750214][ T4176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.757326][ T4176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.783387][ T4176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.823749][ T4176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.830876][ T4176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.857043][ T4176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.893152][ T4169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.915333][ T4179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.922297][ T4179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.954916][ T4179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.969190][ T4167] team0: Port device team_slave_0 added [ 62.977482][ T4169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.990663][ T4168] device hsr_slave_0 entered promiscuous mode [ 62.998488][ T4168] device hsr_slave_1 entered promiscuous mode [ 63.015870][ T4179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.022865][ T4179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.049352][ T4179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.062311][ T4167] team0: Port device team_slave_1 added [ 63.121117][ T4169] team0: Port device team_slave_0 added [ 63.130319][ T4176] device hsr_slave_0 entered promiscuous mode [ 63.137444][ T4176] device hsr_slave_1 entered promiscuous mode [ 63.144087][ T4176] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.152125][ T4176] Cannot create hsr debugfs directory [ 63.185355][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.192446][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.218858][ T4167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.231800][ T4169] team0: Port device team_slave_1 added [ 63.248693][ T4179] device hsr_slave_0 entered promiscuous mode [ 63.255723][ T4179] device hsr_slave_1 entered promiscuous mode [ 63.262288][ T4179] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.270257][ T4179] Cannot create hsr debugfs directory [ 63.280348][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.287648][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.314043][ T4167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.359979][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.367193][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.393210][ T4169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.443210][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.450407][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.477951][ T4169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.505272][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 63.505272][ T1108] Bluetooth: hci4: command 0x0409 tx timeout [ 63.505830][ T1108] Bluetooth: hci3: command 0x0409 tx timeout [ 63.526922][ T1108] Bluetooth: hci2: command 0x0409 tx timeout [ 63.533128][ T1108] Bluetooth: hci1: command 0x0409 tx timeout [ 63.544807][ T4167] device hsr_slave_0 entered promiscuous mode [ 63.552613][ T4167] device hsr_slave_1 entered promiscuous mode [ 63.559469][ T4167] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.567101][ T4167] Cannot create hsr debugfs directory [ 63.685484][ T4169] device hsr_slave_0 entered promiscuous mode [ 63.692322][ T4169] device hsr_slave_1 entered promiscuous mode [ 63.699241][ T4169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.706951][ T4169] Cannot create hsr debugfs directory [ 63.842720][ T4176] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.876003][ T4176] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.901504][ T4176] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.920521][ T4176] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.963671][ T4168] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.978824][ T4168] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.008581][ T4168] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.021621][ T4168] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.049298][ T4179] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.058741][ T4179] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.076532][ T4179] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.095356][ T4179] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.178527][ T4167] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.193219][ T4167] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.220366][ T4167] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.260991][ T4167] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.283518][ T4176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.302824][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.313884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.341633][ T4176] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.368791][ T4179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.378873][ T4168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.396935][ T4169] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.408305][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.417791][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.427152][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.434526][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.444276][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.453335][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.462703][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.469821][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.488855][ T4169] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.500024][ T4169] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.520624][ T4168] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.530084][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.538382][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.547406][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.555793][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.563597][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.578222][ T4179] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.588657][ T4169] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.607120][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.651860][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.661713][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.670796][ T1226] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.677934][ T1226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.687604][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.697687][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.707233][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.715945][ T1226] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.723020][ T1226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.730853][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.740395][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.749833][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.758652][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.767430][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.776754][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.785193][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.795592][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.806711][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.815494][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.822583][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.847826][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.856087][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.865796][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.874966][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.883815][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.893589][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.902923][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.912483][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.921690][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.930479][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.939386][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.946494][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.961609][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.970040][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.979186][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.988721][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.997482][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.013051][ T4167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.022259][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.032474][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.045867][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.063886][ T4176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.085467][ T4167] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.092462][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.101818][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.110107][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.118263][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.128700][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.143211][ T4179] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.160778][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.173152][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.185990][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.207524][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.216860][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.226501][ T431] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.233690][ T431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.251931][ T4168] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.263143][ T4168] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.293778][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.303198][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.321510][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.334109][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.343462][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.359279][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.380761][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.390681][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.401119][ T1226] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.408267][ T1226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.430275][ T4169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.454506][ T4179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.461682][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.481180][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.492518][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.502704][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.540747][ T4169] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.553706][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.565263][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.573920][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.583547][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.594634][ T4211] Bluetooth: hci1: command 0x041b tx timeout [ 65.600873][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.600977][ T4211] Bluetooth: hci2: command 0x041b tx timeout [ 65.611232][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.630156][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.637786][ T4211] Bluetooth: hci3: command 0x041b tx timeout [ 65.650625][ T4211] Bluetooth: hci0: command 0x041b tx timeout [ 65.660058][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.664573][ T4211] Bluetooth: hci4: command 0x041b tx timeout [ 65.678961][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.687799][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.695693][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.703939][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.713700][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.722678][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.729808][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.743396][ T4167] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.757000][ T4167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.768725][ T4176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.784760][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.793769][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.805552][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.814117][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.824964][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.845156][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.853906][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.875917][ T431] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.883019][ T431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.897607][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.931069][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.955103][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.966009][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.976781][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.986524][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.996378][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.017333][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.027047][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.042217][ T4176] device veth0_vlan entered promiscuous mode [ 66.066200][ T4167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.084626][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.092562][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.101755][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.110589][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.119081][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.126667][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.135817][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.144377][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.152786][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.163258][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.171214][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.191117][ T4169] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.202605][ T4169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.215182][ T4176] device veth1_vlan entered promiscuous mode [ 66.222717][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.231584][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.240711][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.250911][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.259530][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.287669][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.299103][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.309298][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.319186][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.341997][ T4179] device veth0_vlan entered promiscuous mode [ 66.364556][ T4168] device veth0_vlan entered promiscuous mode [ 66.378709][ T4168] device veth1_vlan entered promiscuous mode [ 66.390263][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.400115][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.408476][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.418465][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.427508][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.436397][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.445064][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.452978][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.496833][ T4179] device veth1_vlan entered promiscuous mode [ 66.504414][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.512513][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.521151][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.533282][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.542429][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.551230][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.559044][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.567588][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.583894][ T4167] device veth0_vlan entered promiscuous mode [ 66.601929][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.610888][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.620962][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.632070][ T4176] device veth0_macvtap entered promiscuous mode [ 66.646595][ T4176] device veth1_macvtap entered promiscuous mode [ 66.656593][ T4167] device veth1_vlan entered promiscuous mode [ 66.671606][ T4169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.702787][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.711527][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.720162][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.729890][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.738114][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.747626][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.756759][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.765756][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.787480][ T4168] device veth0_macvtap entered promiscuous mode [ 66.805758][ T4179] device veth0_macvtap entered promiscuous mode [ 66.813515][ T4168] device veth1_macvtap entered promiscuous mode [ 66.825295][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.832849][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.841909][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.850374][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.859394][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.869480][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.891473][ T4179] device veth1_macvtap entered promiscuous mode [ 66.909822][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.926403][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.935979][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.944766][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.953494][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.971632][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.983205][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.995853][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.006471][ T4176] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.015727][ T4176] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.026649][ T4176] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.035532][ T4176] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.063098][ T4167] device veth0_macvtap entered promiscuous mode [ 67.072099][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.082541][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.091796][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.101110][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.116760][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.127371][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.139638][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.163313][ T4167] device veth1_macvtap entered promiscuous mode [ 67.173920][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.187214][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.197329][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.208024][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.220101][ T4179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.227686][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.237706][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.246621][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.255443][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.264102][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.273360][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.285463][ T4168] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.294180][ T4168] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.303563][ T4168] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.312619][ T4168] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.332562][ T4169] device veth0_vlan entered promiscuous mode [ 67.344817][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.353108][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.363453][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.371734][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.400008][ T4169] device veth1_vlan entered promiscuous mode [ 67.414596][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.426290][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.436473][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.447141][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.458638][ T4179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.472659][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.484001][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.493966][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.505402][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.516371][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.526884][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.538029][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.573263][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.595306][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.603404][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.612924][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.622228][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.631268][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.643059][ T4179] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.652143][ T4179] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.661268][ T4179] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.670635][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 67.671136][ T4179] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.677377][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 67.692052][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 67.698792][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 67.700779][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.716477][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.726594][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.737941][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.748334][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.755351][ T4214] Bluetooth: hci4: command 0x040f tx timeout [ 67.758951][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.776291][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.812707][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.821743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.837470][ T4167] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.847310][ T4167] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.856184][ T4167] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.865202][ T4167] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.912087][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.921065][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.933223][ T4169] device veth0_macvtap entered promiscuous mode [ 67.949026][ T431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.958372][ T431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.980465][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.991749][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.019852][ T4169] device veth1_macvtap entered promiscuous mode [ 68.099841][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.106717][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.112927][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.128960][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.141606][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.142931][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.161246][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.172168][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.182865][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.193777][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.205300][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.232541][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.242469][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.251364][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.261879][ T431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.263461][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.283324][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.287184][ T431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.294658][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.311528][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.321731][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.332449][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.342626][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.353770][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.365731][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.386527][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.401290][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.410657][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.421828][ T431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.425330][ T4169] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.430418][ T431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.439562][ T4169] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.456081][ T4169] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.465997][ T4169] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.511454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.530332][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.546576][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.556791][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.586530][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.613555][ T431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.628152][ T431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.647495][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.667773][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.678836][ T431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.690771][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.698380][ T431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.716779][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.832877][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.855037][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.937359][ T1226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.945839][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.959058][ T4254] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 68.980875][ T1226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.033903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.273944][ T4262] process 'syz.2.7' launched '/dev/fd/-1/./file0' with NULL argv: empty string added [ 69.365040][ T4266] overlayfs: failed to resolve './file2': -2 [ 70.069483][ T4213] Bluetooth: hci1: command 0x0419 tx timeout [ 70.076946][ T4213] Bluetooth: hci2: command 0x0419 tx timeout [ 70.083507][ T4213] Bluetooth: hci3: command 0x0419 tx timeout [ 70.090029][ T4213] Bluetooth: hci0: command 0x0419 tx timeout [ 70.096883][ T4213] Bluetooth: hci4: command 0x0419 tx timeout [ 70.295813][ T4276] syz.3.13[4276] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.295915][ T4276] syz.3.13[4276] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.400471][ T4279] device wg2 entered promiscuous mode [ 70.463869][ T4285] loop3: detected capacity change from 0 to 16 [ 70.728795][ T4290] loop4: detected capacity change from 0 to 1024 [ 70.945033][ T4293] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14'. [ 71.267803][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.274989][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.486130][ T4290] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 71.890495][ T4303] loop0: detected capacity change from 0 to 512 [ 72.455458][ T4303] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 72.687710][ T4303] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.021179][ T4312] loop3: detected capacity change from 0 to 2048 [ 73.220145][ T4312] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 74.322580][ T4325] xt_hashlimit: max too large, truncated to 1048576 [ 74.775199][ T4326] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 74.791433][ T4326] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 74.804669][ T4326] EXT4-fs (loop3): This should not happen!! Data will be lost [ 74.804669][ T4326] [ 74.814468][ T4326] EXT4-fs (loop3): Total free blocks count 0 [ 74.820511][ T4326] EXT4-fs (loop3): Free/Dirty block details [ 74.826623][ T4326] EXT4-fs (loop3): free_blocks=2415919104 [ 74.832448][ T4326] EXT4-fs (loop3): dirty_blocks=16 [ 74.837681][ T4326] EXT4-fs (loop3): Block reservation details [ 74.843727][ T4326] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 76.731996][ T4294] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 76.809847][ T4294] EXT4-fs (loop3): This should not happen!! Data will be lost [ 76.809847][ T4294] [ 76.876043][ T4337] xt_hashlimit: max too large, truncated to 1048576 [ 77.001982][ T4342] loop1: detected capacity change from 0 to 16 [ 77.139145][ T4344] loop0: detected capacity change from 0 to 256 [ 78.014204][ C0] sched: RT throttling activated [ 78.112911][ T4349] netlink: 20 bytes leftover after parsing attributes in process `syz.1.27'. [ 78.720913][ T4339] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 78.820807][ T4353] loop1: detected capacity change from 0 to 1024 [ 80.051321][ T4360] loop0: detected capacity change from 0 to 512 [ 80.094984][ T4353] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 81.510336][ T1710] cfg80211: failed to load regulatory.db [ 81.526333][ T4360] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 81.558290][ T4379] xt_hashlimit: max too large, truncated to 1048576 [ 81.674456][ T4360] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.080885][ T4392] loop3: detected capacity change from 0 to 16 [ 83.187895][ T4392] erofs: (device loop3): mounted with root inode @ nid 36. [ 83.634397][ T4409] loop2: detected capacity change from 0 to 8192 [ 83.717040][ T4415] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 85.612034][ T4345] Bluetooth: hci5: Frame reassembly failed (-84) [ 85.634463][ T26] audit: type=1326 audit(1733495754.827:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4419 comm="syz.1.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7f412f19 code=0x7ffc0000 [ 85.711735][ T26] audit: type=1326 audit(1733495754.837:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4419 comm="syz.1.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e7f412f19 code=0x7ffc0000 [ 85.761251][ T26] audit: type=1326 audit(1733495754.837:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4419 comm="syz.1.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7f412f19 code=0x7ffc0000 [ 85.814137][ T26] audit: type=1326 audit(1733495754.837:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4419 comm="syz.1.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7f412f19 code=0x7ffc0000 [ 86.186986][ T26] audit: type=1326 audit(1733495754.867:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4419 comm="syz.1.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e7f412f19 code=0x7ffc0000 [ 86.215102][ T26] audit: type=1326 audit(1733495754.877:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4419 comm="syz.1.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7f412f19 code=0x7ffc0000 [ 86.279186][ T26] audit: type=1326 audit(1733495754.877:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4419 comm="syz.1.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e7f412f19 code=0x7ffc0000 [ 86.334670][ T26] audit: type=1326 audit(1733495754.877:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4419 comm="syz.1.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7f412f19 code=0x7ffc0000 [ 86.363071][ T26] audit: type=1326 audit(1733495754.877:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4419 comm="syz.1.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e7f412f19 code=0x7ffc0000 [ 86.427424][ T26] audit: type=1326 audit(1733495754.877:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4419 comm="syz.1.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7f412f19 code=0x7ffc0000 [ 86.490708][ T4426] loop3: detected capacity change from 0 to 512 [ 86.683909][ T4426] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 86.707946][ T4426] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.680342][ T13] Bluetooth: hci5: command 0x1003 tx timeout [ 87.702591][ T4183] Bluetooth: hci5: sending frame failed (-49) [ 87.730040][ T4446] loop1: detected capacity change from 0 to 1024 [ 87.824014][ T4446] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 87.857678][ T4448] loop0: detected capacity change from 0 to 8192 [ 87.963174][ T4448] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 88.884141][ T4458] Zero length message leads to an empty skb [ 89.628149][ T4462] loop0: detected capacity change from 0 to 512 [ 89.731493][ T4462] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 89.745187][ T4214] Bluetooth: hci5: command 0x1001 tx timeout [ 89.751297][ T4183] Bluetooth: hci5: sending frame failed (-49) [ 91.937970][ T4214] Bluetooth: hci5: command 0x1009 tx timeout [ 92.100905][ T4462] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #3: comm syz.0.58: corrupted inode contents [ 92.115269][ T4462] EXT4-fs error (device loop0): ext4_dirty_inode:6010: inode #3: comm syz.0.58: mark_inode_dirty error [ 92.153436][ T4462] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #3: comm syz.0.58: corrupted inode contents [ 92.177925][ T4462] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #3: comm syz.0.58: mark_inode_dirty error [ 92.200373][ T4462] __quota_error: 4 callbacks suppressed [ 92.200393][ T4462] Quota error (device loop0): write_blk: dquota write failed [ 92.229079][ T4462] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 92.243156][ T4462] EXT4-fs error (device loop0): ext4_acquire_dquot:6197: comm syz.0.58: Failed to acquire dquot type 0 [ 92.271675][ T4462] EXT4-fs (loop0): 1 orphan inode deleted [ 92.286576][ T4462] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 92.299787][ T4462] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.391111][ T2304] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 92.813145][ T4462] syz.0.58 (4462) used greatest stack depth: 19584 bytes left [ 93.223572][ T4486] loop2: detected capacity change from 0 to 16 [ 93.295107][ T4486] erofs: (device loop2): mounted with root inode @ nid 36. [ 93.385474][ T4491] loop0: detected capacity change from 0 to 16 [ 93.434525][ T2304] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.453812][ T2304] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.470550][ T2304] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.523168][ T2304] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 93.542925][ T2304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.574863][ T2304] usb 2-1: config 0 descriptor?? [ 93.603048][ T4484] loop3: detected capacity change from 0 to 40427 [ 93.796750][ T4494] netlink: 20 bytes leftover after parsing attributes in process `syz.0.65'. [ 94.036544][ T4484] F2FS-fs (loop3): invalid crc value [ 94.352046][ T4484] F2FS-fs (loop3): Found nat_bits in checkpoint [ 94.559792][ T2304] gt683r_led 0003:1770:FF00.0001: item fetching failed at offset 1/5 [ 94.569602][ T4484] F2FS-fs (loop3): Start checkpoint disabled! [ 94.577445][ T2304] gt683r_led 0003:1770:FF00.0001: hid parsing failed [ 94.584174][ T2304] gt683r_led: probe of 0003:1770:FF00.0001 failed with error -22 [ 94.601645][ T4501] loop0: detected capacity change from 0 to 1024 [ 94.610957][ T4500] loop2: detected capacity change from 0 to 1024 [ 94.611013][ T4484] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 94.675941][ T4500] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 94.824559][ T2304] usb 2-1: USB disconnect, device number 2 [ 94.953170][ T26] audit: type=1804 audit(1733495764.137:16): pid=4509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.62" name="/newroot/14/bus/file0" dev="loop3" ino=10 res=1 errno=0 [ 95.061303][ T4501] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 97.533800][ T4530] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 99.369811][ T4542] loop0: detected capacity change from 0 to 16 [ 99.538543][ T4542] erofs: (device loop0): mounted with root inode @ nid 36. [ 99.771918][ T4547] loop4: detected capacity change from 0 to 16 [ 100.299565][ T4556] loop1: detected capacity change from 0 to 512 [ 100.350894][ T4553] loop3: detected capacity change from 0 to 1024 [ 100.528611][ T4556] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 100.546124][ T4553] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 100.574510][ T4556] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.592307][ T4558] netlink: 20 bytes leftover after parsing attributes in process `syz.4.78'. [ 101.065862][ T4571] loop0: detected capacity change from 0 to 1024 [ 102.070058][ T4571] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 102.149839][ T4581] loop4: detected capacity change from 0 to 2048 [ 102.441352][ T4581] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 103.435131][ T4590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.85'. [ 104.765918][ T4609] loop3: detected capacity change from 0 to 16 [ 104.844506][ T4609] erofs: (device loop3): mounted with root inode @ nid 36. [ 105.712450][ T4617] loop2: detected capacity change from 0 to 16 [ 107.634021][ T4627] loop4: detected capacity change from 0 to 512 [ 107.876357][ T4627] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 107.917337][ T4627] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.156838][ T4635] loop0: detected capacity change from 0 to 1024 [ 108.167922][ T4629] loop1: detected capacity change from 0 to 1024 [ 109.587924][ T4629] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 109.600012][ T4635] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 109.693043][ T4648] loop2: detected capacity change from 0 to 2048 [ 110.002877][ T4648] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 111.002007][ T4665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.100'. [ 111.012191][ T4665] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 111.027161][ T4665] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 111.039499][ T4665] EXT4-fs (loop2): This should not happen!! Data will be lost [ 111.039499][ T4665] [ 111.049458][ T4665] EXT4-fs (loop2): Total free blocks count 0 [ 111.055518][ T4665] EXT4-fs (loop2): Free/Dirty block details [ 111.061424][ T4665] EXT4-fs (loop2): free_blocks=2415919104 [ 111.067270][ T4665] EXT4-fs (loop2): dirty_blocks=16 [ 111.072389][ T4665] EXT4-fs (loop2): Block reservation details [ 111.078399][ T4665] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 111.876306][ T4670] xt_hashlimit: max too large, truncated to 1048576 [ 112.053328][ T144] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 112.097906][ T144] EXT4-fs (loop2): This should not happen!! Data will be lost [ 112.097906][ T144] [ 113.012271][ T4684] loop2: detected capacity change from 0 to 16 [ 113.067839][ T4684] erofs: (device loop2): mounted with root inode @ nid 36. [ 113.176206][ T4685] loop0: detected capacity change from 0 to 16 [ 114.507674][ T4697] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 116.517495][ T4704] loop1: detected capacity change from 0 to 512 [ 116.876982][ T4704] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 117.265652][ T4704] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.361056][ T4710] loop4: detected capacity change from 0 to 1024 [ 117.636141][ T4710] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 118.953277][ T4722] loop0: detected capacity change from 0 to 2048 [ 119.059350][ T4724] loop1: detected capacity change from 0 to 1024 [ 119.129354][ T4722] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 119.349141][ T4724] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 119.586021][ T4735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.118'. [ 119.609191][ T4735] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 119.625329][ T4735] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 119.637798][ T4735] EXT4-fs (loop0): This should not happen!! Data will be lost [ 119.637798][ T4735] [ 119.649328][ T4735] EXT4-fs (loop0): Total free blocks count 0 [ 119.655533][ T4735] EXT4-fs (loop0): Free/Dirty block details [ 119.661662][ T4735] EXT4-fs (loop0): free_blocks=2415919104 [ 119.667755][ T4735] EXT4-fs (loop0): dirty_blocks=16 [ 119.673027][ T4735] EXT4-fs (loop0): Block reservation details [ 119.679258][ T4735] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 120.626059][ T4742] loop2: detected capacity change from 0 to 16 [ 120.635776][ T4740] xt_hashlimit: max too large, truncated to 1048576 [ 120.873477][ T4295] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 120.889481][ T4295] EXT4-fs (loop0): This should not happen!! Data will be lost [ 120.889481][ T4295] [ 121.983822][ T4756] loop3: detected capacity change from 0 to 512 [ 123.108748][ T4756] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 123.154370][ T4756] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.474097][ T4767] loop2: detected capacity change from 0 to 16 [ 123.727035][ T4767] erofs: (device loop2): mounted with root inode @ nid 36. [ 124.272253][ T4774] loop0: detected capacity change from 0 to 1024 [ 124.462754][ T4774] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 126.547312][ T4799] loop2: detected capacity change from 0 to 2048 [ 126.658735][ T4801] loop0: detected capacity change from 0 to 1024 [ 126.686308][ T4803] xt_hashlimit: max too large, truncated to 1048576 [ 126.755251][ T4799] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 126.812703][ T4801] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 127.190898][ T4815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.135'. [ 127.210128][ T4815] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 127.226527][ T4815] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 127.239187][ T4815] EXT4-fs (loop2): This should not happen!! Data will be lost [ 127.239187][ T4815] [ 127.248994][ T4815] EXT4-fs (loop2): Total free blocks count 0 [ 127.255105][ T4815] EXT4-fs (loop2): Free/Dirty block details [ 127.261097][ T4815] EXT4-fs (loop2): free_blocks=2415919104 [ 127.266928][ T4815] EXT4-fs (loop2): dirty_blocks=16 [ 127.272113][ T4815] EXT4-fs (loop2): Block reservation details [ 127.278194][ T4815] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 127.763875][ T144] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 127.794646][ T144] EXT4-fs (loop2): This should not happen!! Data will be lost [ 127.794646][ T144] [ 128.118510][ T4822] loop2: detected capacity change from 0 to 16 [ 130.279530][ T4832] loop4: detected capacity change from 0 to 512 [ 130.282149][ T4835] loop0: detected capacity change from 0 to 1024 [ 130.355580][ T4837] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 132.047816][ T4835] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 132.071035][ T4832] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 132.084497][ T4832] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.148207][ T4844] loop2: detected capacity change from 0 to 16 [ 132.317738][ T4844] erofs: (device loop2): mounted with root inode @ nid 36. [ 132.393762][ T1710] ODEBUG: Out of memory. ODEBUG disabled [ 132.787577][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.793929][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.862100][ T4857] xt_hashlimit: max too large, truncated to 1048576 [ 135.037338][ T4869] loop3: detected capacity change from 0 to 16 [ 135.392445][ T4870] loop4: detected capacity change from 0 to 2048 [ 136.502505][ T4870] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 137.060598][ T4889] loop3: detected capacity change from 0 to 1024 [ 138.234407][ T4898] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 138.523536][ T4885] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 138.618764][ T4901] loop0: detected capacity change from 0 to 1024 [ 138.760600][ T4889] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 138.790476][ T4904] loop1: detected capacity change from 0 to 16 [ 138.823619][ T4901] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 138.824823][ T4904] erofs: (device loop1): mounted with root inode @ nid 36. [ 140.049023][ T4919] loop4: detected capacity change from 0 to 512 [ 140.162529][ T4919] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 140.188996][ T4919] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.351459][ T4929] xt_hashlimit: max too large, truncated to 1048576 [ 141.923478][ T4936] loop3: detected capacity change from 0 to 16 [ 143.889348][ T4950] xt_hashlimit: max too large, truncated to 1048576 [ 144.321787][ T4958] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 144.642876][ T4957] loop0: detected capacity change from 0 to 2048 [ 144.721937][ T4960] loop4: detected capacity change from 0 to 1024 [ 145.763135][ T4967] loop2: detected capacity change from 0 to 1024 [ 145.953066][ T4960] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 145.967458][ T4957] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 146.011593][ T4967] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 146.771790][ T4982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.171'. [ 146.783018][ T4982] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 146.799000][ T4982] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 146.811566][ T4982] EXT4-fs (loop0): This should not happen!! Data will be lost [ 146.811566][ T4982] [ 146.821284][ T4982] EXT4-fs (loop0): Total free blocks count 0 [ 146.827484][ T4982] EXT4-fs (loop0): Free/Dirty block details [ 146.833449][ T4982] EXT4-fs (loop0): free_blocks=2415919104 [ 146.839226][ T4982] EXT4-fs (loop0): dirty_blocks=16 [ 146.844393][ T4982] EXT4-fs (loop0): Block reservation details [ 146.850392][ T4982] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 146.887940][ T4986] loop1: detected capacity change from 0 to 512 [ 146.990261][ T4986] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 147.034354][ T4986] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.004726][ T4996] loop1: detected capacity change from 0 to 16 [ 148.133592][ T4996] erofs: (device loop1): mounted with root inode @ nid 36. [ 149.116558][ T4294] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 149.147067][ T4294] EXT4-fs (loop0): This should not happen!! Data will be lost [ 149.147067][ T4294] [ 149.268588][ T5014] loop2: detected capacity change from 0 to 16 [ 149.584918][ T5018] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 151.541130][ T5027] loop3: detected capacity change from 0 to 1024 [ 152.494962][ T5032] xt_hashlimit: max too large, truncated to 1048576 [ 153.003796][ T5027] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 153.130385][ T5038] loop1: detected capacity change from 0 to 512 [ 153.752896][ T5038] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 153.826370][ T5038] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.448271][ T5055] loop4: detected capacity change from 0 to 2048 [ 154.646772][ T5055] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 156.422159][ T5077] loop0: detected capacity change from 0 to 16 [ 156.464088][ T5081] loop2: detected capacity change from 0 to 16 [ 156.653248][ T5077] erofs: (device loop0): mounted with root inode @ nid 36. [ 156.681870][ T5087] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 157.192474][ T5092] xt_hashlimit: max too large, truncated to 1048576 [ 159.126098][ T5098] loop3: detected capacity change from 0 to 512 [ 159.241300][ T5098] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 159.254497][ T5098] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.259047][ T5104] loop1: detected capacity change from 0 to 1024 [ 159.402574][ T5104] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 162.353040][ T5129] loop3: detected capacity change from 0 to 2048 [ 162.606893][ T5129] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 162.623645][ T5140] loop4: detected capacity change from 0 to 16 [ 162.633729][ T5137] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 162.849662][ T5139] xt_hashlimit: max too large, truncated to 1048576 [ 164.056193][ T5149] loop2: detected capacity change from 0 to 16 [ 164.297376][ T5149] erofs: (device loop2): mounted with root inode @ nid 36. [ 165.299483][ T5158] loop3: detected capacity change from 0 to 512 [ 165.398884][ T5165] loop1: detected capacity change from 0 to 1024 [ 165.407145][ T5158] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 165.418581][ T5158] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.545056][ T5165] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 167.279833][ T5190] xt_hashlimit: max too large, truncated to 1048576 [ 167.820963][ T5189] loop4: detected capacity change from 0 to 2048 [ 168.030606][ T5196] loop0: detected capacity change from 0 to 16 [ 168.354489][ T5189] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 168.372866][ T5201] xt_hashlimit: max too large, truncated to 1048576 [ 168.571525][ T5207] loop3: detected capacity change from 0 to 512 [ 168.850403][ T5212] netlink: 20 bytes leftover after parsing attributes in process `syz.0.231'. [ 168.888559][ T5209] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 169.428741][ T5207] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 169.492261][ T5207] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.843935][ T5220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.227'. [ 169.854368][ T5220] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 169.870246][ T5220] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 169.882592][ T5220] EXT4-fs (loop4): This should not happen!! Data will be lost [ 169.882592][ T5220] [ 169.892324][ T5220] EXT4-fs (loop4): Total free blocks count 0 [ 169.898468][ T5220] EXT4-fs (loop4): Free/Dirty block details [ 169.904583][ T5220] EXT4-fs (loop4): free_blocks=2415919104 [ 169.910356][ T5220] EXT4-fs (loop4): dirty_blocks=16 [ 169.915552][ T5220] EXT4-fs (loop4): Block reservation details [ 169.921547][ T5220] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 170.370097][ T5228] loop1: detected capacity change from 0 to 16 [ 170.450516][ T5228] erofs: (device loop1): mounted with root inode @ nid 36. [ 170.978068][ T5232] loop1: detected capacity change from 0 to 1024 [ 171.082930][ T5232] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 171.626977][ T154] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 171.664259][ T154] EXT4-fs (loop4): This should not happen!! Data will be lost [ 171.664259][ T154] [ 174.714674][ T5260] loop0: detected capacity change from 0 to 16 [ 174.785060][ T5262] xt_hashlimit: max too large, truncated to 1048576 [ 175.002479][ T5268] loop1: detected capacity change from 0 to 16 [ 175.373484][ T5268] erofs: (device loop1): mounted with root inode @ nid 36. [ 175.400036][ T5272] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 175.759670][ T5276] loop2: detected capacity change from 0 to 512 [ 175.925243][ T5280] netlink: 20 bytes leftover after parsing attributes in process `syz.0.244'. [ 176.276633][ T5276] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 176.484106][ T5276] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.590023][ T5287] loop0: detected capacity change from 0 to 2048 [ 176.761021][ T5289] loop4: detected capacity change from 0 to 1024 [ 176.782558][ T5287] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 176.952830][ T5289] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 177.137519][ T5299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.251'. [ 177.156386][ T5299] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 177.172068][ T5299] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 177.184497][ T5299] EXT4-fs (loop0): This should not happen!! Data will be lost [ 177.184497][ T5299] [ 177.194269][ T5299] EXT4-fs (loop0): Total free blocks count 0 [ 177.201129][ T5299] EXT4-fs (loop0): Free/Dirty block details [ 177.207330][ T5299] EXT4-fs (loop0): free_blocks=2415919104 [ 177.213156][ T5299] EXT4-fs (loop0): dirty_blocks=16 [ 177.218358][ T5299] EXT4-fs (loop0): Block reservation details [ 177.224521][ T5299] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 177.759966][ T4295] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 177.813483][ T4295] EXT4-fs (loop0): This should not happen!! Data will be lost [ 177.813483][ T4295] [ 180.290960][ T5322] xt_hashlimit: max too large, truncated to 1048576 [ 181.914826][ T5336] loop3: detected capacity change from 0 to 16 [ 181.948544][ T5330] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 181.998147][ T5338] loop0: detected capacity change from 0 to 16 [ 182.103235][ T5338] erofs: (device loop0): mounted with root inode @ nid 36. [ 182.501565][ T5345] netlink: 20 bytes leftover after parsing attributes in process `syz.3.261'. [ 182.933656][ T5346] xt_hashlimit: max too large, truncated to 1048576 [ 183.575648][ T5350] loop3: detected capacity change from 0 to 1024 [ 184.045611][ T5354] loop2: detected capacity change from 0 to 2048 [ 184.105642][ T5350] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 184.297788][ T5354] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 184.606267][ T5370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.265'. [ 184.616840][ T5370] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 184.631906][ T5370] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 184.644484][ T5370] EXT4-fs (loop2): This should not happen!! Data will be lost [ 184.644484][ T5370] [ 184.654746][ T5370] EXT4-fs (loop2): Total free blocks count 0 [ 184.660763][ T5370] EXT4-fs (loop2): Free/Dirty block details [ 184.666978][ T5370] EXT4-fs (loop2): free_blocks=2415919104 [ 184.673104][ T5370] EXT4-fs (loop2): dirty_blocks=16 [ 184.678329][ T5370] EXT4-fs (loop2): Block reservation details [ 184.684407][ T5370] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 185.021450][ T4307] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 185.095747][ T4307] EXT4-fs (loop2): This should not happen!! Data will be lost [ 185.095747][ T4307] [ 185.116782][ T5376] xt_hashlimit: max too large, truncated to 1048576 [ 186.055870][ T21] Bluetooth: hci1: command 0x0406 tx timeout [ 186.063897][ T21] Bluetooth: hci2: command 0x0406 tx timeout [ 186.082779][ T21] Bluetooth: hci3: command 0x0406 tx timeout [ 186.207950][ T21] Bluetooth: hci4: command 0x0406 tx timeout [ 186.234267][ T21] Bluetooth: hci0: command 0x0406 tx timeout [ 187.181122][ T5390] loop1: detected capacity change from 0 to 512 [ 187.391855][ T5390] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 187.485004][ T5390] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.531005][ T5397] loop2: detected capacity change from 0 to 16 [ 188.001773][ T5405] loop3: detected capacity change from 0 to 16 [ 188.826054][ T5407] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 189.151380][ T5410] loop2: detected capacity change from 0 to 1024 [ 189.167956][ T5405] erofs: (device loop3): mounted with root inode @ nid 36. [ 189.178021][ T5412] xt_hashlimit: max too large, truncated to 1048576 [ 189.341636][ T5410] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 189.799170][ T5424] loop1: detected capacity change from 0 to 1024 [ 189.887369][ T5426] xt_hashlimit: max too large, truncated to 1048576 [ 190.096106][ T5424] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 191.849707][ T5451] loop0: detected capacity change from 0 to 16 [ 191.951712][ T5454] loop3: detected capacity change from 0 to 512 [ 192.993753][ T5454] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 193.065356][ T5454] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.489183][ T5464] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 194.916204][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.925847][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.195224][ T5476] loop2: detected capacity change from 0 to 1024 [ 195.214366][ T5477] xt_hashlimit: max too large, truncated to 1048576 [ 196.790666][ T5476] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 197.327821][ T5502] loop3: detected capacity change from 0 to 512 [ 197.335695][ T5504] loop4: detected capacity change from 0 to 16 [ 197.386269][ T26] audit: type=1326 audit(1733495866.587:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.2.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efedddfff19 code=0x7ffc0000 [ 197.424128][ T26] audit: type=1326 audit(1733495866.617:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.2.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efedddfff19 code=0x7ffc0000 [ 197.481556][ T26] audit: type=1326 audit(1733495866.617:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.2.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efedddfff19 code=0x7ffc0000 [ 197.529663][ T26] audit: type=1326 audit(1733495866.617:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.2.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efedddfff19 code=0x7ffc0000 [ 197.605761][ T5502] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 197.640397][ T5502] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.671093][ T26] audit: type=1326 audit(1733495866.617:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.2.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efedddfff19 code=0x7ffc0000 [ 197.803925][ T26] audit: type=1326 audit(1733495866.617:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.2.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efedddfff19 code=0x7ffc0000 [ 200.275891][ T5518] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 200.295729][ T26] audit: type=1326 audit(1733495866.617:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.2.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7efedddfff19 code=0x7ffc0000 [ 200.419371][ T26] audit: type=1326 audit(1733495866.617:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.2.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efedddfff19 code=0x7ffc0000 [ 200.750782][ T5529] loop4: detected capacity change from 0 to 512 [ 201.029494][ T5531] loop0: detected capacity change from 0 to 1024 [ 201.155161][ T5531] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 201.223857][ T5529] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 202.715926][ T4307] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.734184][ T5568] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 203.170019][ T4307] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.263422][ T4307] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.411764][ T4307] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.642040][ T5577] loop1: detected capacity change from 0 to 1024 [ 203.662408][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 203.867510][ T5580] loop0: detected capacity change from 0 to 1024 [ 204.094475][ T5577] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 204.159667][ T5580] EXT4-fs (loop0): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,max_dir_size_kb=0x000000000000007f,nolazytime,noload,nombcache,acl,,errors=continue. Quota mode: none. [ 204.999087][ T5559] loop3: detected capacity change from 0 to 40427 [ 205.412605][ T5574] chnl_net:caif_netlink_parms(): no params data found [ 205.664276][ T3968] Bluetooth: hci0: command 0x0409 tx timeout [ 206.204476][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.236017][ T7] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 206.255592][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.269092][ T7] usb 5-1: config 0 descriptor?? [ 206.457085][ T5616] syz.4.333[5616] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 206.457179][ T5616] syz.4.333[5616] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 206.474334][ T7] usbhid 5-1:0.0: can't add hid device: -71 [ 206.474664][ T7] usbhid: probe of 5-1:0.0 failed with error -71 [ 206.513801][ T5574] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.541098][ T7] usb 5-1: USB disconnect, device number 2 [ 206.559474][ T5574] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.585879][ T5574] device bridge_slave_0 entered promiscuous mode [ 206.900846][ T5574] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.922569][ T5574] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.946606][ T5574] device bridge_slave_1 entered promiscuous mode [ 207.121371][ T5574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.211268][ T5574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.318574][ T5574] team0: Port device team_slave_0 added [ 207.356870][ T5574] team0: Port device team_slave_1 added [ 207.391842][ T5640] loop0: detected capacity change from 0 to 1024 [ 207.616352][ T5640] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 207.686637][ T5574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.703998][ T5574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.733273][ T5574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.822522][ T5574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.824329][ T23] Bluetooth: hci0: command 0x041b tx timeout [ 207.853462][ T5574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.891516][ T5658] loop4: detected capacity change from 0 to 4096 [ 207.930348][ T5574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.018195][ T5658] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 208.063613][ T5658] netlink: 'syz.4.340': attribute type 1 has an invalid length. [ 208.106285][ T5574] device hsr_slave_0 entered promiscuous mode [ 208.304875][ T5574] device hsr_slave_1 entered promiscuous mode [ 208.330259][ T5574] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.375362][ T5574] Cannot create hsr debugfs directory [ 209.904269][ T3968] Bluetooth: hci0: command 0x040f tx timeout [ 210.027678][ T5695] netlink: 28 bytes leftover after parsing attributes in process `syz.4.347'. [ 210.036767][ T5695] netlink: 28 bytes leftover after parsing attributes in process `syz.4.347'. [ 210.422808][ T5709] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 210.465618][ T4307] device hsr_slave_0 left promiscuous mode [ 210.484743][ T4307] device hsr_slave_1 left promiscuous mode [ 210.518313][ T4307] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.558439][ T4307] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.595095][ T4307] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.618846][ T4307] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.650172][ T4307] device bridge_slave_1 left promiscuous mode [ 210.711637][ T4307] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.386606][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 212.404293][ T26] audit: type=1326 audit(1733495881.597:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5721 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72633bcf19 code=0x7ffc0000 [ 212.459850][ T4307] device bridge_slave_0 left promiscuous mode [ 212.476691][ T4307] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.487130][ T5727] loop1: detected capacity change from 0 to 1024 [ 212.489992][ T5726] loop0: detected capacity change from 0 to 256 [ 212.494040][ T26] audit: type=1326 audit(1733495881.637:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5721 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72633bcf19 code=0x7ffc0000 [ 212.536574][ T26] audit: type=1326 audit(1733495881.637:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5721 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72633bcf19 code=0x7ffc0000 [ 212.568800][ T26] audit: type=1326 audit(1733495881.637:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5721 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72633bcf19 code=0x7ffc0000 [ 212.577407][ T5726] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 212.598582][ T26] audit: type=1326 audit(1733495881.657:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5721 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72633bcf19 code=0x7ffc0000 [ 212.612921][ T5727] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 212.637582][ T4307] device veth1_macvtap left promiscuous mode [ 212.644496][ T4307] device veth0_macvtap left promiscuous mode [ 212.650586][ T4307] device veth1_vlan left promiscuous mode [ 212.656707][ T4307] device veth0_vlan left promiscuous mode [ 212.663736][ T26] audit: type=1326 audit(1733495881.657:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5721 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72633bcf19 code=0x7ffc0000 [ 212.691851][ T26] audit: type=1326 audit(1733495881.657:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5721 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72633bcf19 code=0x7ffc0000 [ 212.716750][ T26] audit: type=1326 audit(1733495881.657:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5721 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f72633bcf19 code=0x7ffc0000 [ 212.770338][ T5726] exFAT-fs (loop0): hint_cluster is invalid (17) [ 212.822796][ T26] audit: type=1326 audit(1733495881.657:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5721 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72633bcf19 code=0x7ffc0000 [ 212.891622][ T26] audit: type=1326 audit(1733495881.657:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5721 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f72633bcf19 code=0x7ffc0000 [ 213.229299][ T4307] team0 (unregistering): Port device team_slave_1 removed [ 213.306800][ T4307] team0 (unregistering): Port device team_slave_0 removed [ 213.333444][ T4307] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.395343][ T4307] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.409901][ T5738] loop3: detected capacity change from 0 to 512 [ 213.558453][ T4307] bond0 (unregistering): Released all slaves [ 213.603385][ T5738] ------------[ cut here ]------------ [ 213.633573][ T5738] WARNING: CPU: 0 PID: 5738 at arch/x86/kvm/x86.c:10346 kvm_arch_vcpu_ioctl_run+0x1d63/0x1f80 [ 213.651594][ T5738] Modules linked in: [ 213.656251][ T5738] CPU: 0 PID: 5738 Comm: syz.3.357 Not tainted 5.15.173-syzkaller #0 [ 213.672338][ T5738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 213.683246][ T5738] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1d63/0x1f80 [ 213.697118][ T5738] Code: df e8 81 a7 ba 00 e9 e5 fa ff ff 89 d9 80 e1 07 38 c1 0f 8c 26 fb ff ff 48 89 df e8 67 a7 ba 00 e9 19 fb ff ff e8 4d cf 70 00 <0f> 0b e9 e0 fb ff ff 89 d9 80 e1 07 38 c1 0f 8c 63 fb ff ff 48 89 [ 213.724305][ T5738] RSP: 0018:ffffc900031bfc60 EFLAGS: 00010287 [ 213.730686][ T5738] RAX: ffffffff810fa453 RBX: 0000000000000000 RCX: 0000000000080000 [ 213.747149][ T5738] RDX: ffffc9000db79000 RSI: 0000000000000413 RDI: 0000000000000414 [ 213.762726][ T5738] RBP: dffffc0000000000 R08: ffffffff8116c242 R09: fffffbfff1c14b16 [ 213.772302][ T5738] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880185d3b80 [ 213.849098][ T5738] R13: ffff8880594f8000 R14: ffff8880594f80f0 R15: ffff888060d2d000 [ 213.861074][ T5738] FS: 00007f72612336c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 213.911029][ T5738] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 213.925624][ T5738] CR2: 000000110c27cd05 CR3: 0000000026020000 CR4: 00000000003526e0 [ 213.981452][ T5738] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 214.036599][ T5738] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 214.101313][ T5738] Call Trace: [ 214.132528][ T5738] [ 214.157934][ T5574] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 214.175460][ T5738] ? __warn+0x15b/0x300 [ 214.202115][ T5738] ? kvm_arch_vcpu_ioctl_run+0x1d63/0x1f80 [ 214.243432][ T5574] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 214.256857][ T5738] ? report_bug+0x1b7/0x2e0 [ 214.261419][ T5738] ? handle_bug+0x3d/0x70 [ 214.267450][ T5738] ? exc_invalid_op+0x16/0x40 [ 214.272173][ T5738] ? asm_exc_invalid_op+0x16/0x20 [ 214.277304][ T5738] ? kvm_lapic_hv_timer_in_use+0x62/0xc0 [ 214.282966][ T5738] ? kvm_arch_vcpu_ioctl_run+0x1d63/0x1f80 [ 214.303439][ T5738] ? kvm_arch_vcpu_ioctl_run+0x1d63/0x1f80 [ 214.314432][ T5738] kvm_vcpu_ioctl+0x7f0/0xcf0 [ 214.324610][ T5738] ? kvm_clear_stat_per_vcpu+0x1e0/0x1e0 [ 214.330635][ T5574] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 214.334874][ T5738] ? __fget_files+0x413/0x480 [ 214.376675][ T5738] ? bpf_lsm_file_ioctl+0x5/0x10 [ 214.381678][ T5738] ? security_file_ioctl+0x7d/0xa0 [ 214.390953][ T5738] ? kvm_clear_stat_per_vcpu+0x1e0/0x1e0 [ 214.401137][ T5574] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 214.414069][ T5738] __se_sys_ioctl+0xf1/0x160 [ 214.424358][ T5738] do_syscall_64+0x3b/0xb0 [ 214.428827][ T5738] ? clear_bhb_loop+0x15/0x70 [ 214.527102][ T5738] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 214.538257][ T5738] RIP: 0033:0x7f72633bcf19 [ 214.558179][ T5738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.624964][ T5738] RSP: 002b:00007f7261233058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 214.633446][ T5738] RAX: ffffffffffffffda RBX: 00007f7263582fa0 RCX: 00007f72633bcf19 [ 214.663678][ T5738] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 214.706006][ T5738] RBP: 00007f7263430986 R08: 0000000000000000 R09: 0000000000000000 [ 214.732668][ T5574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.754116][ T5738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.780419][ T5738] R13: 0000000000000000 R14: 00007f7263582fa0 R15: 00007ffc03494648 [ 214.785878][ T5574] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.817556][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 214.832291][ T5738] [ 214.844932][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 214.864349][ T5738] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 214.871678][ T5738] CPU: 1 PID: 5738 Comm: syz.3.357 Not tainted 5.15.173-syzkaller #0 [ 214.879783][ T5738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 214.889860][ T5738] Call Trace: [ 214.893160][ T5738] [ 214.896115][ T5738] dump_stack_lvl+0x1e3/0x2d0 [ 214.900830][ T5738] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 214.906516][ T5738] ? panic+0x860/0x860 [ 214.910629][ T5738] ? kvm_arch_vcpu_ioctl_run+0x1d10/0x1f80 [ 214.916463][ T5738] ? kvm_arch_vcpu_ioctl_run+0x1d10/0x1f80 [ 214.922286][ T5738] panic+0x318/0x860 [ 214.926208][ T5738] ? __warn+0x16a/0x300 [ 214.930389][ T5738] ? fb_is_primary_device+0xd0/0xd0 [ 214.935628][ T5738] ? kvm_arch_vcpu_ioctl_run+0x1d63/0x1f80 [ 214.941465][ T5738] __warn+0x2b2/0x300 [ 214.945473][ T5738] ? kvm_arch_vcpu_ioctl_run+0x1d63/0x1f80 [ 214.951297][ T5738] report_bug+0x1b7/0x2e0 [ 214.955652][ T5738] handle_bug+0x3d/0x70 [ 214.959829][ T5738] exc_invalid_op+0x16/0x40 [ 214.964355][ T5738] asm_exc_invalid_op+0x16/0x20 [ 214.969234][ T5738] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1d63/0x1f80 [ 214.975676][ T5738] Code: df e8 81 a7 ba 00 e9 e5 fa ff ff 89 d9 80 e1 07 38 c1 0f 8c 26 fb ff ff 48 89 df e8 67 a7 ba 00 e9 19 fb ff ff e8 4d cf 70 00 <0f> 0b e9 e0 fb ff ff 89 d9 80 e1 07 38 c1 0f 8c 63 fb ff ff 48 89 [ 214.995296][ T5738] RSP: 0018:ffffc900031bfc60 EFLAGS: 00010287 [ 215.001388][ T5738] RAX: ffffffff810fa453 RBX: 0000000000000000 RCX: 0000000000080000 [ 215.009375][ T5738] RDX: ffffc9000db79000 RSI: 0000000000000413 RDI: 0000000000000414 [ 215.017361][ T5738] RBP: dffffc0000000000 R08: ffffffff8116c242 R09: fffffbfff1c14b16 [ 215.025354][ T5738] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880185d3b80 [ 215.033342][ T5738] R13: ffff8880594f8000 R14: ffff8880594f80f0 R15: ffff888060d2d000 [ 215.041337][ T5738] ? kvm_lapic_hv_timer_in_use+0x62/0xc0 [ 215.046992][ T5738] ? kvm_arch_vcpu_ioctl_run+0x1d63/0x1f80 [ 215.052851][ T5738] kvm_vcpu_ioctl+0x7f0/0xcf0 [ 215.057585][ T5738] ? kvm_clear_stat_per_vcpu+0x1e0/0x1e0 [ 215.063258][ T5738] ? __fget_files+0x413/0x480 [ 215.067968][ T5738] ? bpf_lsm_file_ioctl+0x5/0x10 [ 215.072933][ T5738] ? security_file_ioctl+0x7d/0xa0 [ 215.078066][ T5738] ? kvm_clear_stat_per_vcpu+0x1e0/0x1e0 [ 215.083742][ T5738] __se_sys_ioctl+0xf1/0x160 [ 215.088361][ T5738] do_syscall_64+0x3b/0xb0 [ 215.092799][ T5738] ? clear_bhb_loop+0x15/0x70 [ 215.097505][ T5738] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 215.103423][ T5738] RIP: 0033:0x7f72633bcf19 [ 215.107861][ T5738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.127484][ T5738] RSP: 002b:00007f7261233058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 215.135919][ T5738] RAX: ffffffffffffffda RBX: 00007f7263582fa0 RCX: 00007f72633bcf19 [ 215.143913][ T5738] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 215.151909][ T5738] RBP: 00007f7263430986 R08: 0000000000000000 R09: 0000000000000000 [ 215.159888][ T5738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.167866][ T5738] R13: 0000000000000000 R14: 00007f7263582fa0 R15: 00007ffc03494648 [ 215.175959][ T5738] [ 215.179278][ T5738] Kernel Offset: disabled [ 215.183792][ T5738] Rebooting in 86400 seconds..