last executing test programs: 34.745756477s ago: executing program 2 (id=264): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$tipc(r2, &(0x7f0000005a40)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x2}}, 0x10) 26.133906714s ago: executing program 2 (id=281): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040), 0x1, 0xbaf, &(0x7f0000002f00)="$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") fchown(0xffffffffffffffff, 0x0, 0xee01) 26.133719994s ago: executing program 1 (id=282): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f0000000340)={@none, 0x7, 0x3ff, 0x4, 0x7fe, 0x543c, "bff4f1fabcb85ed48daefd6ca9d2524375b8c7277e729061d02b18406a501b3202bcdfcb7f3770add328ddf8694e3bf048186838d68fef85e4b3975782769bd43bd2569f6ecf283c998cafbe4cbac28ae275100b82092b375024e5ff809d53e119ae55ee8f33100e9483de825b18eb2d0267a64a9dc1be830ce057eb1c5cc363"}) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@empty}, &(0x7f00000001c0)=0x14) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 23.941214302s ago: executing program 1 (id=284): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 23.170520485s ago: executing program 2 (id=287): mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') 23.095497486s ago: executing program 1 (id=288): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xa, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0x100, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), &(0x7f0000000580)=r2}, 0x20) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r3 = socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close(r3) 19.805895342s ago: executing program 2 (id=291): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$tipc(r2, &(0x7f0000005a40)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x2}}, 0x10) 19.231618432s ago: executing program 1 (id=292): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) 19.074842914s ago: executing program 0 (id=294): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f0000000340)={@none, 0x7, 0x3ff, 0x4, 0x7fe, 0x543c, "bff4f1fabcb85ed48daefd6ca9d2524375b8c7277e729061d02b18406a501b3202bcdfcb7f3770add328ddf8694e3bf048186838d68fef85e4b3975782769bd43bd2569f6ecf283c998cafbe4cbac28ae275100b82092b375024e5ff809d53e119ae55ee8f33100e9483de825b18eb2d0267a64a9dc1be830ce057eb1c5cc363"}) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@empty}, &(0x7f00000001c0)=0x14) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 18.095775661s ago: executing program 4 (id=296): bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xa00, 0x1c0) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r5, r4, 0x0, 0x3a) 16.014508577s ago: executing program 0 (id=298): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000c40)=@deltaction={0x14, 0x31, 0x400, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000801}, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00'}, 0x18) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000340), 0x4, 0x241, &(0x7f00000009c0)="$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") setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x210, 0x230, 0x230, 0x210, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x7f510100, 0x4, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002440)=ANY=[@ANYBLOB="38000000200001000000000000000000020000000000000000000000140003006c6f"], 0x38}}, 0x0) 15.376077048s ago: executing program 3 (id=299): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x1) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 15.053716933s ago: executing program 4 (id=300): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a80)={{{@in6=@ipv4={""/10, ""/2, @loopback}, @in=@broadcast}}, {{@in=@initdev}, 0x0, @in6}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000283d0020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x1d0, 0x11, 0x148, 0x0, 0x0, 0x2d0, 0x2a8, 0x2a8, 0x2d0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x188, 0x1d0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [0xffffff00, 0xff, 0xffffff00], @ipv6=@dev={0xfe, 0x80, '\x00', 0xe}, [0x0, 0xffffff00], @ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffff00], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0xff000000, 0xff], 0x8, 0x6, 0x5e, 0x4e21, 0x4e23, 0x4e24, 0x4e21}, 0x40, 0x8e0}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0xffffffff, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x242, 0x75f65a4e97d6873f, 0x1}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000001b40)='./file0\x00', 0x208108dc, &(0x7f0000002a80)=ANY=[], 0x1, 0x1503, &(0x7f0000000580)="$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") 14.769685178s ago: executing program 1 (id=301): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_emit_ethernet(0xc8, &(0x7f0000000600)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0086dd6a606fb700920601fc00000000000000000000000000000000000000000001080204010860c706fc02000000000000000000000000000116081058a39c54d24c76049300000000000007400000c382c603e2fe29ac249e3600020e0581000f0000000000000000000000000000000100000000000000fb00000000000000f927000000000000030000"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c00)={{}, &(0x7f0000000180), &(0x7f0000000b80)='%pI4 \x00'}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43, 0xfffffffc}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x8, 0xffe00000, 0x3, 0xfffffffd, 0x8000, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5, r4}, 0x38) ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0xffffffff00000000, 0x2003) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000180)={0x1c, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}}, 0x64000) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3008c94, &(0x7f0000000400)={[{@dioread_lock}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@quota}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@grpquota}, {@barrier_val}, {@grpjquota}, {@jqfmt_vfsold}]}, 0x45, 0x7bf, &(0x7f0000000e00)="$eJzs3c9rG1ceAPDvyPLPZNdeWNjNngQLu4EQeZ31Jlso1KWHUmgg0J56aGJkxaSWrWDJITamTSiFXgpt6a295Nyfl9Jrfxx6af+PkhJaJzSlh+Iy+hHLtuRKiS2T5vOBid+beaM333lPb148YymAR1Yu/ScTcSwi3kwixhvrk4gYrKWyETP1cnc31gvpksTm5nM/JLUydzbWC9GyT+pII/P3iPjytYgTmd31VlbXFmZLpeJyIz9ZXbw8WVldO3lpcXa+OF9cOj01PX3qzP/OnN6/WH/6du3o9289/e+PZn559W8fv/FVEjNxtLGtNY79kotc45wMpqdwm6f2u7JD8+nLXRRq6QHZgzwYepQ2zECjVY7FeAzs1T6j/TwyAOCgvBIRm50MdNwCADzUkvr1/4nDPg4AoF+avwe4s7FeaC6H+xuJ/rr1ZESM1ONv3t+sb8k27tmN1O6Djt1Jtt0ZSSJiYh/qz0XEe5+9+EG6xAHdhwRo59r1iLgwkds9/ie7nlno1X/ar55vzeR2bDT+Qf98ns5//t9u/pe5N/+JNvOf4Tbv3fuRS7bnd7//Mzf3oZqO0vnf4y3Ptt1tib9hYqCR+1NtzjeYXLxUKqZj258j4ngMDqf5qT3qOH7719udtrXO/358+6X30/rTn1slMjezw9v3mZutzj5IzK1uXY/4R7Zd/On4P1xr/6TD/Pdcl3U889jr73balsafxttcdsd/sDZvRPyrbftvdcxkz+cTJ2vdYbLZKdr4ZCbGOtWfy261f7qk9Tf/L9APafuP7R3/RNL6vGal65e+97TYNzfGv+hUqLX/t4+/ff8fSp6vpYca667OVqvLUxFDybO715/a2reZb5ZP4z/+z/bv/+b416b/v5C+/oUuT0R2ID6sj5j3E//BSuOf66n9e07EyN2FgU717xF/o/+k7T+9bZ9uxr9uD/BBzh0AAAAAAAAAAAAAAAAAAAAAAAAAdCsTEUcjyeTvpTOZfL7+Hd5/jbFMqVypnrhYXlmai9p3ZU/EYKb5UZfjLZ+HOtX4PPxm/tSO/H8j4i8R8c7waC2fL5RLc4cdPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0HOnw/f+p74Z3FB44jCMEAA7EiAs7ADxqkmz2sA8BAOi3kZ5Kjx7YcQAA/dPb9R8A+CNw/QeAR8/vXP93/hkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Orc2bPpsvnzxnohzc9dWV1ZKF85OVesLOQXVwr5Qnn5cn6+XJ4vFfOF8mLHF7pW/1Eqly9Px9LK1clqsVKdrKyunV8sryxVz19anJ0vni8O9i0yAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOheZXVtYbZUKi5L7E9iuHFiu9xr4et68XZlNjcPPxyJvRNxrafmfogSMbQ1Soz2f2ACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeEj8FgAA///+gx9z") r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r7, &(0x7f0000004200)='t', 0x1) sendfile(r7, r6, 0x0, 0x3ffff) 14.442392974s ago: executing program 0 (id=302): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) keyctl$link(0x8, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000800)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = socket(0x10, 0x80803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c0000005e000102000000000000000000000000682ce665c9"], 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) recvmmsg(r3, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}], 0x7, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mm_page_alloc\x00', r5}, 0x10) syz_read_part_table(0x5c3, &(0x7f00000005c0)="$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") r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000ffff100018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) 9.785321763s ago: executing program 4 (id=303): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=@newtaction={0xf0, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x0, 0x446, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, 0xfffffffd}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x401}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 8.913750108s ago: executing program 3 (id=304): vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x7f) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, 0x0) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) 8.417773496s ago: executing program 1 (id=305): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0xc00e4000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="050000009268000002000000040000"], 0x50) getrandom(&(0x7f0000000080)=""/240, 0xfffffffffffffe77, 0x0) 7.05369602s ago: executing program 3 (id=306): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000740)=0x3, 0x4) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x8, 0xfffd, 0x9, "000100"}) ioctl$TIOCSTI(r4, 0x5412, 0x0) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r5, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./file1\x00', 0x1000801, &(0x7f0000000400)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRES32=0x0, @ANYRESOCT, @ANYRES16, @ANYRES32, @ANYRES16], 0x2, 0x212, &(0x7f00000001c0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 7.04255955s ago: executing program 4 (id=307): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) open(0x0, 0x14167e, 0xa0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000080)=r5}, 0x20) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008ffffffdb0110000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_tgsigqueueinfo(0x0, 0x0, 0x2f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.949737321s ago: executing program 2 (id=308): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0x4]}, 0x8) read(r2, &(0x7f0000000740)=""/377, 0x179) timer_create(0x9, &(0x7f0000000180)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)=0x0) timer_settime(r3, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdir(0x0, 0x0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, 0x0, 0x41) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8) syz_open_dev$usbfs(0x0, 0x200800000800078, 0x80501) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x500000, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') read$char_usb(r5, &(0x7f0000000040)=""/50, 0x32) preadv(r5, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/115, 0x73}], 0x1, 0x2, 0x7) ioctl$HIDIOCGSTRING(r5, 0x81044804, &(0x7f0000000340)={0xf0, "ad28d6be2733571193bd864b4ebc9f7689150dbaf15a9a844024d2283f1013331d5e9be0f9da0cbc2adbaa138160844f8b659583a9841acc7cfa0db1c46a41594bf31af14623d54b3433b72468db84d1c35950063d4c05d9f5823696d357d843dfc06a9655d9ccf1be0419f3d69ada19d16d16772227db43c337a2275b2cb56aa0accf834ed58ee3edcb8e3a3f9d8dc950a052c75bd356c3fc9ecc4633e577965675aa127eded074be4498c7d63c14c1a19aae1f835832fb91fa4a646d7456337c0a50d8834124f6bc37a434a31f5675ef11fc0f5dc0ef8b165f4b7f02878f599c005dbf8fb91e4d50cc71fba206ab31"}) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c01000017000100000000000000000000000000000000000000ffffac1e00010000000000000000e0000002000000000000000000000000fe800000000000000000000000000000fe8000000000000000000000000000bb00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000e3ffffff0000000000200100000000efa688a47bd81bacaf1e6ad8302200ab000000000000000000010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000030000000000000000000000000000000025bd700008001f00030000000c0015005b07350003000000"], 0x13c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r6}, 0x10) 6.906537562s ago: executing program 0 (id=309): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040), 0x1, 0xbaf, &(0x7f0000002f00)="$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") fchown(0xffffffffffffffff, 0x0, 0xee01) 5.25455124s ago: executing program 3 (id=310): bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xa00, 0x1c0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0x3a) 5.224267541s ago: executing program 4 (id=311): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) socket$tipc(0x1e, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "fc7771", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x82, 0x0, 0x10}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x1, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0x2}}}}}}}, 0x0) 4.10244786s ago: executing program 0 (id=312): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40080) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb000000}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.994173496s ago: executing program 3 (id=313): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000010a000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326625000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x8, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001880)={0x11, 0x1e, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x2, 0x9, 0x5, 0xb}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.992988396s ago: executing program 4 (id=314): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0xc00e4000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x50) getrandom(&(0x7f0000000080)=""/240, 0xfffffffffffffe77, 0x0) 612.52508ms ago: executing program 0 (id=315): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0x20002078) 456.092533ms ago: executing program 2 (id=316): vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x7f) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, 0x0) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) 0s ago: executing program 3 (id=317): ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000040)) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x400, &(0x7f0000000080)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x181000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r3, 0x0, 0x7, &(0x7f0000000040)=0xe, 0x4) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb, 0x3}) read$FUSE(r2, &(0x7f0000009800)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0xfe05a, 0x5000, 0x0, 0x0, 0xc}}, 0x50) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.161' (ED25519) to the list of known hosts. [ 55.584251][ T4254] cgroup: Unknown subsys name 'net' [ 55.691574][ T4254] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 56.965029][ T4254] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 58.675053][ T4269] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.685958][ T4280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 58.693800][ T4280] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 58.702007][ T4280] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 58.710279][ T4280] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 58.714713][ T4279] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.719826][ T4281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 58.725345][ T4279] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 58.732986][ T4281] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 58.739362][ T4279] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 58.746807][ T4281] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 58.753871][ T4279] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.760800][ T4281] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 58.767147][ T4279] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 58.775557][ T4281] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 58.781924][ T4279] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 58.797205][ T4279] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.797614][ T4281] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 58.804913][ T4279] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 58.812223][ T4281] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 58.819235][ T4279] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 58.826163][ T4281] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 58.833188][ T4279] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 58.840159][ T4281] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 58.854112][ T4279] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.861512][ T4279] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 58.868824][ T4279] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 58.876599][ T4279] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 58.916690][ T4267] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 58.925203][ T47] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 59.346841][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 59.362478][ T4266] chnl_net:caif_netlink_parms(): no params data found [ 59.428772][ T4264] chnl_net:caif_netlink_parms(): no params data found [ 59.462201][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 59.484097][ T4265] chnl_net:caif_netlink_parms(): no params data found [ 59.549622][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.557340][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.565922][ T4274] device bridge_slave_0 entered promiscuous mode [ 59.600217][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.609497][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.617979][ T4274] device bridge_slave_1 entered promiscuous mode [ 59.636051][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.643196][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.652911][ T4266] device bridge_slave_0 entered promiscuous mode [ 59.678419][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.685673][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.693395][ T4266] device bridge_slave_1 entered promiscuous mode [ 59.740461][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.781145][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.796263][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.803398][ T4264] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.811685][ T4264] device bridge_slave_0 entered promiscuous mode [ 59.819713][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.827239][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.835834][ T4265] device bridge_slave_0 entered promiscuous mode [ 59.845075][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.862676][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.869917][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.878096][ T4276] device bridge_slave_0 entered promiscuous mode [ 59.886109][ T4264] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.893166][ T4264] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.901042][ T4264] device bridge_slave_1 entered promiscuous mode [ 59.908505][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.915877][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.923755][ T4265] device bridge_slave_1 entered promiscuous mode [ 59.932238][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.949037][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.956409][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.964173][ T4276] device bridge_slave_1 entered promiscuous mode [ 59.993513][ T4274] team0: Port device team_slave_0 added [ 60.036435][ T4274] team0: Port device team_slave_1 added [ 60.043901][ T4266] team0: Port device team_slave_0 added [ 60.052273][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.064107][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.076121][ T4265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.087107][ T4264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.105929][ T4266] team0: Port device team_slave_1 added [ 60.127608][ T4265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.145702][ T4264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.165122][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.172093][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.198418][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.237681][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.244830][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.271104][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.282767][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.289998][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.316322][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.329808][ T4276] team0: Port device team_slave_0 added [ 60.338796][ T4265] team0: Port device team_slave_0 added [ 60.361700][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.368794][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.395425][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.411761][ T4265] team0: Port device team_slave_1 added [ 60.418795][ T4276] team0: Port device team_slave_1 added [ 60.427854][ T4264] team0: Port device team_slave_0 added [ 60.463484][ T4264] team0: Port device team_slave_1 added [ 60.476525][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.483587][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.510479][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.549593][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.556706][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.582973][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.604844][ T4266] device hsr_slave_0 entered promiscuous mode [ 60.611500][ T4266] device hsr_slave_1 entered promiscuous mode [ 60.619800][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.627042][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.653209][ T4265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.677762][ T4274] device hsr_slave_0 entered promiscuous mode [ 60.684629][ T4274] device hsr_slave_1 entered promiscuous mode [ 60.691515][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.699439][ T4274] Cannot create hsr debugfs directory [ 60.714859][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.721834][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.747993][ T4265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.759482][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.766823][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.793028][ T4264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.832042][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.839148][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.865388][ T4264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.925060][ T4276] device hsr_slave_0 entered promiscuous mode [ 60.931797][ T4276] device hsr_slave_1 entered promiscuous mode [ 60.938801][ T4276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.946643][ T4276] Cannot create hsr debugfs directory [ 60.955417][ T4278] Bluetooth: hci3: command 0x0409 tx timeout [ 60.962025][ T4278] Bluetooth: hci4: command 0x0409 tx timeout [ 60.964693][ T4282] Bluetooth: hci0: command 0x0409 tx timeout [ 60.968713][ T4278] Bluetooth: hci1: command 0x0409 tx timeout [ 60.974299][ T4282] Bluetooth: hci2: command 0x0409 tx timeout [ 61.004542][ T4265] device hsr_slave_0 entered promiscuous mode [ 61.014093][ T4265] device hsr_slave_1 entered promiscuous mode [ 61.021555][ T4265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.029332][ T4265] Cannot create hsr debugfs directory [ 61.053656][ T4264] device hsr_slave_0 entered promiscuous mode [ 61.060560][ T4264] device hsr_slave_1 entered promiscuous mode [ 61.067208][ T4264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.074962][ T4264] Cannot create hsr debugfs directory [ 61.334854][ T4266] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.350022][ T4266] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.373049][ T4266] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.394602][ T4266] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.436402][ T4274] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.445672][ T4274] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.460610][ T4274] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.478404][ T4274] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.532863][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.570400][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.589646][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.614049][ T4265] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.626200][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.633908][ T4265] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.653320][ T4265] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.668459][ T4265] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.677881][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.687133][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.698048][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.705388][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.716051][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.762755][ T4264] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.775596][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.786096][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.795533][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.802779][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.840253][ T4264] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.850512][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.860898][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.872071][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.886167][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.895668][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.916798][ T4264] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.927272][ T4264] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.938194][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.963383][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.974435][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.983161][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.992836][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.006737][ T4276] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.023813][ T4276] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.039706][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.049156][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.058351][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.068197][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.078046][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.091242][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.100146][ T4276] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.110071][ T4276] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.157133][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.175173][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.183816][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.190985][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.200332][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.211221][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.220064][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.227306][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.236310][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.245837][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.272362][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.288054][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.300398][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.314189][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.366317][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.378636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.387739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.397489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.425820][ T4264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.433707][ T4274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.455433][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.486604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.495339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.509252][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.517910][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.541136][ T4265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.553065][ T4264] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.577723][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.587342][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.603112][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.624214][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.641017][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.650943][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.667564][ T4265] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.690388][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.700267][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.710789][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.717982][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.727296][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.735588][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.743309][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.752639][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.762258][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.771021][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.778161][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.788980][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.814423][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.831012][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.841520][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.848696][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.862132][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.874004][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.891092][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.898304][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.911505][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.920629][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.932572][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.941307][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.948516][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.958015][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.966895][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.975739][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.984319][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.993136][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.000297][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.031108][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.039224][ T4282] Bluetooth: hci2: command 0x041b tx timeout [ 63.045308][ T47] Bluetooth: hci1: command 0x041b tx timeout [ 63.045344][ T47] Bluetooth: hci0: command 0x041b tx timeout [ 63.051446][ T4282] Bluetooth: hci4: command 0x041b tx timeout [ 63.057448][ T4278] Bluetooth: hci3: command 0x041b tx timeout [ 63.073264][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.082549][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.095289][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.104131][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.113669][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.123036][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.131586][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.140819][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.149488][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.199826][ T4266] device veth0_vlan entered promiscuous mode [ 63.218568][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.227584][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.236579][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.245083][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.253382][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.262732][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.271917][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.281959][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.290978][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.300747][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.309692][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.319807][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.328977][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.337781][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.346812][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.355939][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.364271][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.372536][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.380235][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.389407][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.398277][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.406937][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.418535][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.430257][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.444143][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.455900][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.463885][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.472050][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.481198][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.489530][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.498319][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.518508][ T4266] device veth1_vlan entered promiscuous mode [ 63.544937][ T4276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.566432][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.586394][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.596288][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.654405][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.671280][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.736098][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.761970][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.775584][ T4266] device veth0_macvtap entered promiscuous mode [ 63.795985][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.831061][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.850616][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.878168][ T4266] device veth1_macvtap entered promiscuous mode [ 63.906399][ T4274] device veth0_vlan entered promiscuous mode [ 63.921570][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.931919][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.945798][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.963208][ T4274] device veth1_vlan entered promiscuous mode [ 64.003247][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.027980][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.046045][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.065462][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.080178][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.092160][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.135187][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.143889][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.158881][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.168159][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.176915][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.184352][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.192125][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.201595][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.213995][ T4266] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.226614][ T4266] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.236454][ T4266] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.245651][ T4266] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.259063][ T4274] device veth0_macvtap entered promiscuous mode [ 64.270208][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.282129][ T4264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.297406][ T4274] device veth1_macvtap entered promiscuous mode [ 64.348384][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.362422][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.374946][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.385080][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.397590][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.429722][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.447920][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.459838][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.485605][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.506341][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.520679][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.531042][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.548816][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.573584][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.593689][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.634124][ T4265] device veth0_vlan entered promiscuous mode [ 64.645122][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.654022][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.663296][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.672067][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.680824][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.689403][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.697859][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.708755][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.721998][ T4274] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.731280][ T4274] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.740503][ T4274] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.750523][ T4274] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.783698][ T4276] device veth0_vlan entered promiscuous mode [ 64.814375][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.828781][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.840820][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.852889][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.892750][ T4276] device veth1_vlan entered promiscuous mode [ 64.912235][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.922024][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.937846][ T4265] device veth1_vlan entered promiscuous mode [ 64.951494][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.963142][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.973110][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.982178][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.015550][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.023558][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.063782][ T4265] device veth0_macvtap entered promiscuous mode [ 65.072763][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.083370][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.091928][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.100863][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.109775][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.117964][ T47] Bluetooth: hci4: command 0x040f tx timeout [ 65.117998][ T47] Bluetooth: hci2: command 0x040f tx timeout [ 65.118024][ T47] Bluetooth: hci1: command 0x040f tx timeout [ 65.125377][ T4278] Bluetooth: hci3: command 0x040f tx timeout [ 65.131925][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.136498][ T47] Bluetooth: hci0: command 0x040f tx timeout [ 65.143241][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.178958][ T4276] device veth0_macvtap entered promiscuous mode [ 65.193936][ T4265] device veth1_macvtap entered promiscuous mode [ 65.229288][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.237474][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.248795][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.258023][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.273096][ T4276] device veth1_macvtap entered promiscuous mode [ 65.292562][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.311338][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.322078][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.335999][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.349170][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.378410][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.396202][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.406028][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.415473][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.423992][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.439712][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.453779][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.475079][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.490466][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.502315][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.540948][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.562084][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.582291][ T4264] device veth0_vlan entered promiscuous mode [ 65.596681][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.605653][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.610115][ T4360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.621850][ T4360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.623164][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.914876][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.025818][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.051827][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.118643][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.168263][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.195303][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.270251][ T4264] device veth1_vlan entered promiscuous mode [ 66.309823][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.328717][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.338703][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.352472][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.362634][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.373237][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.385931][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.393404][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.402364][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.412032][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.421347][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.430550][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.448348][ T4265] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.464068][ T4265] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.480877][ T4265] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.490858][ T4265] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.611859][ T4276] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.622567][ T4276] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.637160][ T4276] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.646272][ T4276] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.831635][ T4362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.892261][ T4362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.013982][ T4264] device veth0_macvtap entered promiscuous mode [ 67.214332][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.216747][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 67.226171][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.230133][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 67.265288][ T4387] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 67.282178][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.295181][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.323210][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.334608][ T47] Bluetooth: hci0: command 0x0419 tx timeout [ 67.340655][ T47] Bluetooth: hci3: command 0x0419 tx timeout [ 67.346806][ T47] Bluetooth: hci1: command 0x0419 tx timeout [ 67.352823][ T47] Bluetooth: hci2: command 0x0419 tx timeout [ 67.359882][ T47] Bluetooth: hci4: command 0x0419 tx timeout [ 67.379303][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.387550][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.427096][ T4264] device veth1_macvtap entered promiscuous mode [ 67.543756][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.558414][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.596933][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.617932][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.665547][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.676392][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.687728][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.698363][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.708569][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.803425][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.070326][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.298739][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.306985][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.372145][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.399613][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.423705][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.471963][ T4403] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 68.473529][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.500508][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.511595][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.523172][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.533654][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.545508][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.555558][ T4405] syz.1.8 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 68.580709][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.638487][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.753073][ T4408] loop2: detected capacity change from 0 to 2048 [ 68.817115][ T4408] Alternate GPT is invalid, using primary GPT. [ 68.823930][ T4408] loop2: p1 p2 p3 [ 69.061297][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.631734][ T4283] udevd[4283]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 69.646456][ T4256] udevd[4256]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 69.676594][ T4258] udevd[4258]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 70.113066][ T4405] loop1: detected capacity change from 0 to 40427 [ 70.169987][ T4405] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 70.217176][ T4405] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 70.273538][ T4405] F2FS-fs (loop1): Found nat_bits in checkpoint [ 70.354483][ C1] sched: RT throttling activated [ 70.361462][ T4362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.375114][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.383428][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.405129][ T4264] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.413894][ T4264] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.444548][ T4362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.465558][ T4264] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.487635][ T4264] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.578757][ T4405] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 70.596579][ T4405] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 70.677309][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.710814][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.361433][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.382900][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.621430][ T4422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.637736][ T4422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.655190][ T4422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.663772][ T4422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.690198][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.720531][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.147918][ T4434] loop3: detected capacity change from 0 to 2048 [ 74.494656][ T4435] loop2: detected capacity change from 0 to 4096 [ 74.545054][ T4437] Zero length message leads to an empty skb [ 75.877028][ T4435] EXT4-fs: failed to create workqueue [ 75.882545][ T4435] EXT4-fs (loop2): mount failed [ 78.418360][ T4452] loop1: detected capacity change from 0 to 512 [ 79.362801][ T22] cfg80211: failed to load regulatory.db [ 80.517252][ T4452] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 80.650428][ T4452] EXT4-fs warning (device loop1): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop1. [ 81.805759][ T4481] loop1: detected capacity change from 0 to 512 [ 83.037458][ T4481] EXT4-fs (loop1): orphan cleanup on readonly fs [ 83.081694][ T4481] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 83.091257][ T4481] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 83.110260][ T4481] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.18: attempt to clear invalid blocks 2 len 1 [ 83.194084][ T4481] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.18: invalid indirect mapped block 1819239214 (level 0) [ 83.559203][ T4499] loop2: detected capacity change from 0 to 16 [ 84.170457][ T4499] erofs: (device loop2): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 66300) [ 84.290151][ T4481] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.18: invalid indirect mapped block 1819239214 (level 1) [ 84.441543][ T4481] EXT4-fs (loop1): 1 truncate cleaned up [ 84.461240][ T4481] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 84.760846][ T4507] loop3: detected capacity change from 0 to 256 [ 84.768063][ T4507] ======================================================= [ 84.768063][ T4507] WARNING: The mand mount option has been deprecated and [ 84.768063][ T4507] and is ignored by this kernel. Remove the mand [ 84.768063][ T4507] option from the mount to silence this warning. [ 84.768063][ T4507] ======================================================= [ 84.919583][ T4509] syz.2.23[4509] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.919681][ T4509] syz.2.23[4509] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.934571][ T4509] loop2: detected capacity change from 0 to 128 [ 86.150499][ T4507] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 86.161684][ T4507] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 88.984898][ T4509] EXT4-fs: failed to create workqueue [ 88.990391][ T4509] EXT4-fs (loop2): mount failed [ 89.013677][ T4507] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 89.265561][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 90.771726][ T4527] loop2: detected capacity change from 0 to 256 [ 90.779054][ T4527] exfat: Bad value for 'dmask' [ 91.111629][ T4258] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 93.548615][ T4548] loop1: detected capacity change from 0 to 1024 [ 93.555911][ T4548] EXT4-fs: Ignoring removed mblk_io_submit option [ 93.562423][ T4548] EXT4-fs: Ignoring removed bh option [ 93.597091][ T4548] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 93.675251][ T4548] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 93.936223][ T4555] loop2: detected capacity change from 0 to 512 [ 95.132865][ T4555] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 95.143112][ T4555] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.494341][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 95.656196][ T4565] process 'syz.0.37' launched '/dev/fd/8' with NULL argv: empty string added [ 95.987637][ T26] audit: type=1326 audit(1753384739.231:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4568 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428838e9a9 code=0x7ffc0000 [ 96.064177][ T26] audit: type=1326 audit(1753384739.271:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4568 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f428838e9a9 code=0x7ffc0000 [ 96.127365][ T26] audit: type=1326 audit(1753384739.271:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4568 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428838e9a9 code=0x7ffc0000 [ 96.188635][ T26] audit: type=1326 audit(1753384739.271:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4568 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428838e9a9 code=0x7ffc0000 [ 96.220829][ T26] audit: type=1326 audit(1753384739.271:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4568 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f428838e9a9 code=0x7ffc0000 [ 96.221975][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 96.261413][ T26] audit: type=1326 audit(1753384739.271:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4568 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428838e9a9 code=0x7ffc0000 [ 96.342498][ T4573] loop1: detected capacity change from 0 to 2048 [ 96.381692][ T26] audit: type=1326 audit(1753384739.271:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4568 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f428838e9a9 code=0x7ffc0000 [ 96.412448][ T26] audit: type=1326 audit(1753384739.271:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4568 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428838e9a9 code=0x7ffc0000 [ 96.456335][ T4571] loop0: detected capacity change from 0 to 128 [ 96.460871][ T26] audit: type=1326 audit(1753384739.271:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4568 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f428838e9a9 code=0x7ffc0000 [ 96.495325][ T4573] loop1: p2 p3 < > p4 < p5 > [ 96.495358][ T4571] EXT4-fs (loop0): Test dummy encryption mode enabled [ 96.502548][ T4573] loop1: partition table partially beyond EOD, truncated [ 96.546805][ T4571] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 96.556842][ T4571] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 96.618703][ T4573] loop1: p3 start 4284289 is beyond EOD, truncated [ 96.697527][ T26] audit: type=1326 audit(1753384739.271:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4568 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428838e9a9 code=0x7ffc0000 [ 97.666331][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 98.000099][ T4604] binder: 4602:4604 unknown command 1074553619 [ 98.006438][ T4604] binder: 4602:4604 ioctl c0306201 200000000540 returned -22 [ 98.353203][ T4610] hub 6-0:1.0: USB hub found [ 98.369200][ T4610] hub 6-0:1.0: 1 port detected [ 99.992788][ T4631] loop3: detected capacity change from 0 to 16 [ 100.001228][ T4631] erofs: Unknown parameter 'GPL' [ 101.659089][ T4635] loop0: detected capacity change from 0 to 512 [ 101.698981][ T4635] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 101.812765][ T4635] EXT4-fs (loop0): orphan cleanup on readonly fs [ 101.846523][ T4635] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.50: bg 0: block 248: padding at end of block bitmap is not set [ 101.868358][ T4635] __quota_error: 15 callbacks suppressed [ 101.868401][ T4635] Quota error (device loop0): write_blk: dquota write failed [ 101.882271][ T4635] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 101.892497][ T4635] EXT4-fs error (device loop0): ext4_acquire_dquot:6814: comm syz.0.50: Failed to acquire dquot type 1 [ 101.944421][ T4635] EXT4-fs (loop0): 1 truncate cleaned up [ 101.957889][ T4635] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 102.218703][ T4635] syz.0.50 (4635) used greatest stack depth: 20800 bytes left [ 104.180261][ T4643] loop1: detected capacity change from 0 to 2048 [ 106.364886][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 106.670513][ T4258] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 106.687803][ T4643] Alternate GPT is invalid, using primary GPT. [ 106.694409][ T4643] loop1: p1 p2 p3 [ 106.999996][ T4283] udevd[4283]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 107.534881][ T26] audit: type=1326 audit(1753384750.771:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4647 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c50d8e9a9 code=0x7ffc0000 [ 108.168236][ T4580] udevd[4580]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 108.211584][ T4256] udevd[4256]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 108.314962][ T26] audit: type=1326 audit(1753384750.771:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4647 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c50d8e9a9 code=0x7ffc0000 [ 108.584242][ T26] audit: type=1326 audit(1753384750.771:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4647 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f8c50d8e9a9 code=0x7ffc0000 [ 108.681478][ T4672] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 110.114569][ T26] audit: type=1326 audit(1753384750.771:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4647 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c50d8e9a9 code=0x7ffc0000 [ 110.190479][ T26] audit: type=1326 audit(1753384750.771:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4647 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c50d8e9a9 code=0x7ffc0000 [ 110.390151][ T26] audit: type=1326 audit(1753384750.771:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4647 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c50d8e9a9 code=0x7ffc0000 [ 110.969208][ T26] audit: type=1326 audit(1753384750.771:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4647 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c50d8e9a9 code=0x7ffc0000 [ 111.042800][ T26] audit: type=1326 audit(1753384750.771:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4647 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c50d8e9a9 code=0x7ffc0000 [ 113.529059][ T4701] loop0: detected capacity change from 0 to 16 [ 113.536348][ T4701] erofs: Unknown parameter 'GPL' [ 114.303979][ T26] audit: type=1326 audit(1753384757.131:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4699 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf3938e9a9 code=0x7ffc0000 [ 114.357978][ T4258] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 114.373699][ T26] audit: type=1326 audit(1753384757.131:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4699 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf3938e9a9 code=0x7ffc0000 [ 114.466812][ T26] audit: type=1326 audit(1753384757.141:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4699 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7fdf3938e9a9 code=0x7ffc0000 [ 114.509632][ T26] audit: type=1326 audit(1753384757.141:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4699 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf3938e9a9 code=0x7ffc0000 [ 114.603504][ T26] audit: type=1326 audit(1753384757.141:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4699 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf3938e9a9 code=0x7ffc0000 [ 114.996707][ T4718] loop2: detected capacity change from 0 to 512 [ 115.949365][ T4718] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 116.380591][ T26] audit: type=1326 audit(1753384757.141:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4699 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf3938e9a9 code=0x7ffc0000 [ 117.021992][ T4725] overlayfs: failed to resolve './file1': -2 [ 117.367508][ T26] audit: type=1326 audit(1753384757.141:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4699 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf3938e9a9 code=0x7ffc0000 [ 117.390389][ T26] audit: type=1326 audit(1753384757.141:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4699 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf3938e9a9 code=0x7ffc0000 [ 117.515829][ T4718] EXT4-fs (loop2): orphan cleanup on readonly fs [ 117.544642][ T4718] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.72: bg 0: block 248: padding at end of block bitmap is not set [ 117.560418][ T4718] Quota error (device loop2): write_blk: dquota write failed [ 117.567980][ T4718] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 117.578196][ T4718] EXT4-fs error (device loop2): ext4_acquire_dquot:6814: comm syz.2.72: Failed to acquire dquot type 1 [ 117.595788][ T4718] EXT4-fs (loop2): 1 truncate cleaned up [ 117.602118][ T4718] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 119.640129][ T4734] loop1: detected capacity change from 0 to 512 [ 120.074675][ T4734] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 120.297283][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 120.588843][ T4734] EXT4-fs (loop1): orphan cleanup on readonly fs [ 120.612572][ T4734] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.78: bg 0: block 248: padding at end of block bitmap is not set [ 120.628596][ T4734] Quota error (device loop1): write_blk: dquota write failed [ 120.638605][ T4734] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 120.648772][ T4734] EXT4-fs error (device loop1): ext4_acquire_dquot:6814: comm syz.1.78: Failed to acquire dquot type 1 [ 120.671597][ T4734] EXT4-fs (loop1): 1 truncate cleaned up [ 120.681590][ T4734] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 120.870410][ T4734] syz.1.78 (4734) used greatest stack depth: 20768 bytes left [ 121.278192][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 122.601535][ T26] audit: type=1326 audit(1753384765.831:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4739 comm="syz.0.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428838e9a9 code=0x7ffc0000 [ 125.003941][ T26] audit: type=1326 audit(1753384765.831:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4739 comm="syz.0.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428838e9a9 code=0x7ffc0000 [ 125.073833][ T4760] loop4: detected capacity change from 0 to 128 [ 125.093691][ T26] audit: type=1326 audit(1753384765.831:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4739 comm="syz.0.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f428838e9a9 code=0x7ffc0000 [ 125.280656][ T26] audit: type=1326 audit(1753384765.831:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4739 comm="syz.0.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428838e9a9 code=0x7ffc0000 [ 125.361202][ T26] audit: type=1326 audit(1753384765.831:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4739 comm="syz.0.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428838e9a9 code=0x7ffc0000 [ 125.388474][ T26] audit: type=1326 audit(1753384765.831:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4739 comm="syz.0.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f428838e9a9 code=0x7ffc0000 [ 125.414829][ T26] audit: type=1326 audit(1753384765.841:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4739 comm="syz.0.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428838e9a9 code=0x7ffc0000 [ 126.143552][ T26] audit: type=1326 audit(1753384765.841:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4739 comm="syz.0.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428838e9a9 code=0x7ffc0000 [ 127.184908][ T4777] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 127.356141][ T26] audit: type=1326 audit(1753384770.351:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4755 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf3938e9a9 code=0x7ffc0000 [ 127.488771][ T26] audit: type=1326 audit(1753384770.351:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4755 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf3938e9a9 code=0x7ffc0000 [ 127.511727][ T26] audit: type=1326 audit(1753384770.351:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4755 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7fdf3938e9a9 code=0x7ffc0000 [ 127.533610][ T4784] binder: 4783:4784 ioctl 4018620d 0 returned -22 [ 127.534523][ T26] audit: type=1326 audit(1753384770.351:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4755 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf3938e9a9 code=0x7ffc0000 [ 127.564379][ T26] audit: type=1326 audit(1753384770.351:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4755 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf3938e9a9 code=0x7ffc0000 [ 127.611393][ T4784] binder: 4783:4784 ioctl c0306201 0 returned -14 [ 127.620902][ T26] audit: type=1326 audit(1753384770.351:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4755 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf3938e9a9 code=0x7ffc0000 [ 127.672175][ T26] audit: type=1326 audit(1753384770.351:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4755 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf3938e9a9 code=0x7ffc0000 [ 127.744561][ T26] audit: type=1326 audit(1753384770.351:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4755 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf3938e9a9 code=0x7ffc0000 [ 127.933525][ T4793] loop1: detected capacity change from 0 to 512 [ 128.006212][ T4793] EXT4-fs: Ignoring removed bh option [ 128.024614][ T22] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 128.061625][ T4793] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 128.123178][ T4793] EXT4-fs (loop1): 1 truncate cleaned up [ 128.146103][ T4793] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 128.396520][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 128.407387][ T22] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.422654][ T22] usb 1-1: config 0 interface 0 has no altsetting 0 [ 128.431589][ T22] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 128.514822][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.542773][ T22] usb 1-1: config 0 descriptor?? [ 128.564155][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 129.199838][ T22] kye 0003:0458:5010.0001: item fetching failed at offset 5/8 [ 129.439802][ T22] kye 0003:0458:5010.0001: parse failed [ 129.454568][ T22] kye: probe of 0003:0458:5010.0001 failed with error -22 [ 129.674600][ T126] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 129.935113][ T126] usb 2-1: Using ep0 maxpacket: 8 [ 129.947884][ T126] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.992808][ T126] usb 2-1: config 0 interface 0 has no altsetting 0 [ 130.006947][ T126] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 130.020728][ T126] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.031444][ T126] usb 2-1: config 0 descriptor?? [ 130.914258][ T4318] usb 1-1: USB disconnect, device number 2 [ 131.270746][ T4825] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 131.504565][ T4318] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 132.988787][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.995216][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.034750][ T4318] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.077930][ T4318] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.177835][ T4318] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 133.221909][ T4318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.263346][ T126] usbhid 2-1:0.0: can't add hid device: -71 [ 133.270393][ T126] usbhid: probe of 2-1:0.0 failed with error -71 [ 133.274767][ T26] audit: type=1326 audit(1753384776.511:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4841 comm="syz.2.109" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c50d8e9a9 code=0x0 [ 133.290364][ T4318] usb 1-1: config 0 descriptor?? [ 133.335004][ T126] usb 2-1: USB disconnect, device number 2 [ 133.536198][ T26] audit: type=1326 audit(1753384776.771:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4832 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e538e9a9 code=0x7ffc0000 [ 133.748854][ T26] audit: type=1326 audit(1753384776.771:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4832 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e538e9a9 code=0x7ffc0000 [ 133.958870][ T26] audit: type=1326 audit(1753384776.771:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4832 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f92e538e9a9 code=0x7ffc0000 [ 134.201741][ T4853] loop1: detected capacity change from 0 to 512 [ 134.266860][ T4853] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 134.399460][ T4853] EXT4-fs (loop1): orphan cleanup on readonly fs [ 134.417474][ T4853] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.110: bg 0: block 248: padding at end of block bitmap is not set [ 134.434259][ T4853] Quota error (device loop1): write_blk: dquota write failed [ 134.442178][ T4853] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 134.452559][ T4853] EXT4-fs error (device loop1): ext4_acquire_dquot:6814: comm syz.1.110: Failed to acquire dquot type 1 [ 134.472979][ T4853] EXT4-fs (loop1): 1 truncate cleaned up [ 134.502067][ T4853] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 135.148116][ T26] audit: type=1326 audit(1753384776.771:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4832 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e538e9a9 code=0x7ffc0000 [ 135.804846][ T4860] overlayfs: unrecognized mount option "/" or missing value [ 136.113477][ T4861] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 136.350641][ T26] audit: type=1326 audit(1753384776.771:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4832 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e538e9a9 code=0x7ffc0000 [ 136.373336][ T4318] usbhid 1-1:0.0: can't add hid device: -71 [ 136.378975][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 136.384582][ T4318] usbhid: probe of 1-1:0.0 failed with error -71 [ 136.420503][ T26] audit: type=1326 audit(1753384776.771:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4832 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92e538e9a9 code=0x7ffc0000 [ 136.563795][ T26] audit: type=1326 audit(1753384776.771:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4832 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e538e9a9 code=0x7ffc0000 [ 136.601800][ T4318] usb 1-1: USB disconnect, device number 3 [ 136.639207][ T4866] loop2: detected capacity change from 0 to 512 [ 136.703083][ T4866] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.113: casefold flag without casefold feature [ 136.872568][ T4866] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.113: couldn't read orphan inode 15 (err -117) [ 136.907550][ T4866] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 138.260642][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 139.963132][ T4905] loop0: detected capacity change from 0 to 1024 [ 142.106726][ T4905] EXT4-fs: Ignoring removed bh option [ 142.186104][ T4905] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 142.441911][ T4918] loop1: detected capacity change from 0 to 512 [ 142.494126][ T4918] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.127: casefold flag without casefold feature [ 142.536592][ T4905] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3841: comm syz.0.123: Allocating blocks 497-513 which overlap fs metadata [ 142.575379][ T4905] EXT4-fs (loop0): Remounting filesystem read-only [ 142.596010][ T4905] EXT4-fs (loop0): pa ffff8880733680e0: logic 256, phys. 385, len 8 [ 142.604640][ T4905] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 142.615756][ T4918] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.127: couldn't read orphan inode 15 (err -117) [ 142.657634][ T4905] EXT4-fs (loop0): Remounting filesystem read-only [ 142.666481][ T4918] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 142.917567][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 142.927000][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 143.362232][ T4931] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 144.238533][ T4933] overlayfs: unrecognized mount option "/" or missing value [ 144.947792][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 144.947811][ T26] audit: type=1326 audit(1753384788.161:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4914 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c50d8e9a9 code=0x7ffc0000 [ 145.112898][ T26] audit: type=1326 audit(1753384788.161:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4914 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c50d8e9a9 code=0x7ffc0000 [ 145.350432][ T26] audit: type=1326 audit(1753384788.161:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4914 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8c50d8e9a9 code=0x7ffc0000 [ 145.372748][ T26] audit: type=1326 audit(1753384788.161:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4914 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c50d8e9a9 code=0x7ffc0000 [ 145.415900][ T26] audit: type=1326 audit(1753384788.161:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4914 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c50d8e9a9 code=0x7ffc0000 [ 149.659412][ T4977] loop0: detected capacity change from 0 to 256 [ 149.751915][ T4974] syz.2.139 (4974) used greatest stack depth: 17672 bytes left [ 149.952020][ T4977] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 149.962809][ T4977] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 149.999131][ T4977] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 154.701294][ T5012] loop0: detected capacity change from 0 to 256 [ 154.797937][ T5012] exfat: Bad value for 'dmask' [ 154.855339][ T4258] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 156.067732][ T26] audit: type=1326 audit(1753384799.061:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5016 comm="syz.4.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e538e9a9 code=0x7ffc0000 [ 156.067773][ T26] audit: type=1326 audit(1753384799.071:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5016 comm="syz.4.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e538e9a9 code=0x7ffc0000 [ 156.067800][ T26] audit: type=1326 audit(1753384799.071:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5016 comm="syz.4.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f92e538e9a9 code=0x7ffc0000 [ 156.067827][ T26] audit: type=1326 audit(1753384799.071:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5016 comm="syz.4.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e538e9a9 code=0x7ffc0000 [ 156.067854][ T26] audit: type=1326 audit(1753384799.081:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5016 comm="syz.4.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e538e9a9 code=0x7ffc0000 [ 156.067880][ T26] audit: type=1326 audit(1753384799.081:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5016 comm="syz.4.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92e538e9a9 code=0x7ffc0000 [ 156.067906][ T26] audit: type=1326 audit(1753384799.091:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5016 comm="syz.4.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e538e9a9 code=0x7ffc0000 [ 156.067933][ T26] audit: type=1326 audit(1753384799.091:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5016 comm="syz.4.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e538e9a9 code=0x7ffc0000 [ 156.103412][ C1] vkms_vblank_simulate: vblank timer overrun [ 156.353120][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.370660][ C1] vkms_vblank_simulate: vblank timer overrun [ 160.590981][ T5059] overlayfs: failed to resolve './file1': -2 [ 165.255576][ T5119] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 165.590186][ T4325] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 165.779082][ T26] audit: type=1326 audit(1753384809.021:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5143 comm="syz.3.182" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f46bc18e9a9 code=0x0 [ 165.780834][ T4325] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.800654][ C0] vkms_vblank_simulate: vblank timer overrun [ 165.828939][ T4325] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 165.841808][ T4325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.869856][ T4325] usb 2-1: config 0 descriptor?? [ 165.938829][ T5146] fuse: Bad value for 'rootmode' [ 166.300813][ T4325] lenovo 0003:17EF:6047.0002: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.1-1/input0 [ 169.017321][ T4278] Bluetooth: hci4: command 0x0405 tx timeout [ 169.381823][ T4325] lenovo 0003:17EF:6047.0002: Failed to switch F7/9/11 mode: -71 [ 169.843509][ T5177] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 170.320652][ T4325] lenovo 0003:17EF:6047.0002: Failed to switch middle button: -71 [ 170.334678][ T4325] lenovo 0003:17EF:6047.0002: Fn-lock setting failed: -71 [ 170.357267][ T4325] lenovo 0003:17EF:6047.0002: Sensitivity setting failed: -71 [ 170.408439][ T4325] usb 2-1: USB disconnect, device number 3 [ 170.437663][ T5184] fuse: Bad value for 'fd' [ 170.442370][ T5185] loop3: detected capacity change from 0 to 256 [ 170.571045][ T5185] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 171.159608][ T5189] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 171.408591][ T5195] tty tty3: ldisc open failed (-12), clearing slot 2 [ 171.650230][ T5192] fido_id[5192]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 171.790781][ T5206] capability: warning: `syz.3.198' uses 32-bit capabilities (legacy support in use) [ 171.896326][ T5203] loop1: detected capacity change from 0 to 40427 [ 171.912656][ T5203] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 171.921879][ T5203] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 171.943704][ T5203] F2FS-fs (loop1): invalid crc value [ 171.981537][ T5203] F2FS-fs (loop1): Found nat_bits in checkpoint [ 172.021735][ T5203] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 172.029460][ T5203] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 173.514584][ T4325] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 173.519167][ T5226] loop1: detected capacity change from 0 to 2048 [ 173.596626][ T5226] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 173.718471][ T4325] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 173.772588][ T4325] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 65535, setting to 8 [ 173.828656][ T4325] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 173.892780][ T4325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.091827][ T5214] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 174.386799][ T4325] usb 3-1: string descriptor 0 read error: -71 [ 174.406080][ T4325] hub 3-1:32.0: USB hub found [ 174.442955][ T4325] hub 3-1:32.0: config failed, can't read hub descriptor (err -22) [ 174.547489][ T5259] fuse: Bad value for 'fd' [ 174.656937][ T4325] usb 3-1: USB disconnect, device number 2 [ 174.947993][ T4641] udevd[4641]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 175.124356][ T5266] fuse: Bad value for 'fd' [ 175.222580][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 176.276484][ T5271] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 180.835224][ T4325] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 181.030568][ T4325] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 181.073805][ T4325] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 65535, setting to 8 [ 181.120691][ T4325] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 181.120719][ T4325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.139806][ T5302] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 181.370634][ T4325] usb 2-1: string descriptor 0 read error: -71 [ 181.398167][ T4325] hub 2-1:32.0: USB hub found [ 181.423019][ T4325] hub 2-1:32.0: config failed, can't read hub descriptor (err -22) [ 181.555345][ T4325] usb 2-1: USB disconnect, device number 4 [ 182.920340][ T4258] udevd[4258]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 182.972962][ T5326] syz.2.227[5326] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 182.973056][ T5326] syz.2.227[5326] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 183.099389][ T26] audit: type=1326 audit(1753384826.341:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5332 comm="syz.1.228" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf3938e9a9 code=0x0 [ 183.191154][ T26] audit: type=1326 audit(1753384826.431:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5332 comm="syz.1.228" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdf3938e9a9 code=0x0 [ 183.588041][ T5337] loop1: detected capacity change from 0 to 128 [ 183.676658][ T5337] EXT4-fs (loop1): Test dummy encryption mode enabled [ 183.931780][ T5337] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 183.947837][ T5337] ext4 filesystem being mounted at /45/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 185.999520][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 186.069380][ T5350] loop4: detected capacity change from 0 to 512 [ 186.075995][ T4278] Bluetooth: hci2: command 0x0406 tx timeout [ 186.082092][ T4278] Bluetooth: hci4: command 0x0406 tx timeout [ 186.084677][ T47] Bluetooth: hci3: command 0x0406 tx timeout [ 186.088195][ T4269] Bluetooth: hci0: command 0x0406 tx timeout [ 186.094390][ T4282] Bluetooth: hci1: command 0x0406 tx timeout [ 186.165034][ T5350] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 186.259815][ T5356] loop3: detected capacity change from 0 to 256 [ 186.360008][ T5356] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 187.525104][ T5350] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 187.604887][ T5350] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.655224][ T5371] loop1: detected capacity change from 0 to 4096 [ 187.937496][ T5371] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 190.282761][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 190.296988][ T5386] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 190.364066][ T5387] loop0: detected capacity change from 0 to 256 [ 190.380885][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 190.416396][ T5387] exfat: Bad value for 'dmask' [ 190.455882][ T4258] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 190.643984][ T5391] loop0: detected capacity change from 0 to 512 [ 190.854844][ T5395] loop1: detected capacity change from 0 to 256 [ 191.206576][ T5395] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 191.217735][ T5395] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 191.281921][ T5395] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 191.627038][ T5391] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.242: casefold flag without casefold feature [ 191.857828][ T5391] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.242: couldn't read orphan inode 15 (err -117) [ 191.933538][ T5391] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 193.337279][ T5418] fuse: Bad value for 'fd' [ 193.452306][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 193.510206][ T5424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.250'. [ 193.523131][ T5424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.250'. [ 193.597193][ T5424] loop4: detected capacity change from 0 to 256 [ 193.647628][ T5424] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 193.781290][ T5431] loop0: detected capacity change from 0 to 4096 [ 194.004287][ T5434] hub 6-0:1.0: USB hub found [ 194.010494][ T5434] hub 6-0:1.0: 1 port detected [ 194.128182][ T5424] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 194.691006][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.724756][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.963524][ T5431] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 195.581042][ T5443] syz.4.250[5443] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 195.581140][ T5443] syz.4.250[5443] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.134509][ T4409] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 196.371914][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 196.387997][ T4409] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.408215][ T4409] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.438975][ T4409] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 196.465792][ T4409] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.543717][ T4409] usb 3-1: config 0 descriptor?? [ 197.680803][ T4409] hid-led 0003:1D34:000A.0003: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.2-1/input0 [ 197.727349][ T4409] hid-led 0003:1D34:000A.0003: Dream Cheeky Webmail Notifier initialized [ 198.403435][ T129] usb 3-1: USB disconnect, device number 3 [ 199.075203][ T5468] loop0: detected capacity change from 0 to 512 [ 199.409284][ T5468] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 199.419107][ T5468] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 199.743776][ T5473] fuse: Invalid rootmode [ 200.813802][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 201.428218][ T5496] loop4: detected capacity change from 0 to 4096 [ 201.751907][ T5496] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 202.131267][ T129] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 202.486638][ T129] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.175749][ T5503] block device autoloading is deprecated and will be removed. [ 203.314541][ T129] usb 1-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 203.393454][ T129] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.855498][ T129] usb 1-1: config 0 descriptor?? [ 204.976168][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 204.994211][ T129] usb 1-1: can't set config #0, error -71 [ 205.029055][ T129] usb 1-1: USB disconnect, device number 4 [ 205.063417][ T5515] fuse: Invalid rootmode [ 205.485664][ T5522] hub 6-0:1.0: USB hub found [ 205.492255][ T5522] hub 6-0:1.0: 1 port detected [ 206.134289][ T5526] loop3: detected capacity change from 0 to 512 [ 206.185876][ T5526] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 206.306098][ T5526] EXT4-fs (loop3): orphan cleanup on readonly fs [ 206.321993][ T5526] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.275: bg 0: block 248: padding at end of block bitmap is not set [ 206.338393][ T5526] Quota error (device loop3): write_blk: dquota write failed [ 206.346294][ T5526] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 206.356533][ T5526] EXT4-fs error (device loop3): ext4_acquire_dquot:6814: comm syz.3.275: Failed to acquire dquot type 1 [ 206.384127][ T5526] EXT4-fs (loop3): 1 truncate cleaned up [ 206.395087][ T5526] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 208.805465][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 209.797851][ T5547] loop4: detected capacity change from 0 to 128 [ 210.086474][ T26] audit: type=1326 audit(1753384852.721:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5540 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46bc18e9a9 code=0x7ffc0000 [ 210.328519][ T5547] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 210.337595][ T5547] ext4 filesystem being mounted at /46/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 210.350045][ T5547] xt_CT: You must specify a L4 protocol and not use inversions on it [ 210.359411][ T5547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.279'. [ 211.294502][ T26] audit: type=1326 audit(1753384852.721:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5540 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46bc18e9a9 code=0x7ffc0000 [ 211.409933][ T26] audit: type=1326 audit(1753384852.721:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5540 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f46bc18e9a9 code=0x7ffc0000 [ 211.440691][ T26] audit: type=1326 audit(1753384852.731:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5540 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46bc18e9a9 code=0x7ffc0000 [ 211.468534][ T26] audit: type=1326 audit(1753384852.731:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5540 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46bc18e9a9 code=0x7ffc0000 [ 211.500661][ T26] audit: type=1326 audit(1753384852.731:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5540 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f46bc18e9a9 code=0x7ffc0000 [ 211.528804][ T26] audit: type=1326 audit(1753384852.741:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5540 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46bc18e9a9 code=0x7ffc0000 [ 211.556438][ T26] audit: type=1326 audit(1753384852.741:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5540 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46bc18e9a9 code=0x7ffc0000 [ 212.027454][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 212.169301][ T5562] loop3: detected capacity change from 0 to 256 [ 212.240328][ T5562] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 212.251127][ T5562] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 212.293168][ T5562] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 216.250404][ T5591] loop3: detected capacity change from 0 to 1024 [ 216.277086][ T5591] EXT4-fs: Ignoring removed orlov option [ 216.497972][ T5591] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 216.514560][ T26] audit: type=1326 audit(1753384859.691:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5583 comm="syz.4.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e538e9a9 code=0x7ffc0000 [ 216.943948][ T26] audit: type=1326 audit(1753384859.691:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5583 comm="syz.4.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e538e9a9 code=0x7ffc0000 [ 217.110640][ T26] audit: type=1326 audit(1753384859.691:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5583 comm="syz.4.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f92e538e9a9 code=0x7ffc0000 [ 217.206019][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 217.244656][ T26] audit: type=1326 audit(1753384859.691:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5583 comm="syz.4.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e538e9a9 code=0x7ffc0000 [ 217.325547][ T26] audit: type=1326 audit(1753384859.691:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5583 comm="syz.4.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e538e9a9 code=0x7ffc0000 [ 217.419700][ T26] audit: type=1326 audit(1753384859.691:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5583 comm="syz.4.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92e538e9a9 code=0x7ffc0000 [ 217.525368][ T5604] loop3: detected capacity change from 0 to 4096 [ 218.334365][ T5604] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 218.539579][ T26] audit: type=1326 audit(1753384859.691:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5583 comm="syz.4.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e538e9a9 code=0x7ffc0000 [ 218.684290][ T26] audit: type=1326 audit(1753384859.691:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5583 comm="syz.4.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e538e9a9 code=0x7ffc0000 [ 218.728113][ T26] audit: type=1804 audit(1753384860.281:100): pid=5591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.295" name="/newroot/70/bus/bus" dev="loop3" ino=18 res=1 errno=0 [ 218.850839][ T5610] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 219.786549][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 220.060208][ T5620] loop0: detected capacity change from 0 to 128 [ 220.097105][ T5620] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 220.107047][ T5620] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 220.120306][ T5620] xt_CT: You must specify a L4 protocol and not use inversions on it [ 220.129058][ T5620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.298'. [ 220.507003][ T5629] xt_hashlimit: max too large, truncated to 1048576 [ 220.581433][ T5629] loop4: detected capacity change from 0 to 256 [ 220.720735][ T5629] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 220.848597][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 222.037189][ T5635] loop1: detected capacity change from 0 to 2048 [ 225.358951][ T5637] loop0: detected capacity change from 0 to 2048 [ 225.444441][ T5635] EXT4-fs warning (device loop1): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop1. [ 225.650867][ T5637] Alternate GPT is invalid, using primary GPT. [ 225.657623][ T5637] loop0: p1 p2 p3 [ 226.382359][ T4283] udevd[4283]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 226.685552][ T4641] udevd[4641]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 226.707897][ T4258] udevd[4258]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 228.432387][ T5659] loop3: detected capacity change from 0 to 16 [ 228.445249][ T5659] erofs: (device loop3): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 66300) [ 229.696029][ T5669] loop0: detected capacity change from 0 to 4096 [ 229.974724][ T26] audit: type=1326 audit(1753384872.221:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5653 comm="syz.4.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e538e9a9 code=0x7ffc0000 [ 230.234832][ T5669] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 231.062721][ T26] audit: type=1326 audit(1753384872.221:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5653 comm="syz.4.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e538e9a9 code=0x7ffc0000 [ 231.094524][ T26] audit: type=1326 audit(1753384872.231:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5653 comm="syz.4.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f92e538e9a9 code=0x7ffc0000 [ 231.132354][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 231.144807][ T26] audit: type=1326 audit(1753384872.231:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5653 comm="syz.4.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e538e9a9 code=0x7ffc0000 [ 231.683733][ T5681] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 231.717181][ T26] audit: type=1326 audit(1753384872.231:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5653 comm="syz.4.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e538e9a9 code=0x7ffc0000 [ 231.760250][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 231.769174][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 231.779478][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 231.787928][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 231.796311][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 231.804686][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 231.813020][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 231.821331][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 231.829614][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 231.838009][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 231.907884][ T26] audit: type=1326 audit(1753384872.241:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5653 comm="syz.4.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92e538e9a9 code=0x7ffc0000 [ 234.355630][ T26] audit: type=1326 audit(1753384872.251:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5653 comm="syz.4.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e538e9a9 code=0x7ffc0000 [ 234.550180][ T26] audit: type=1326 audit(1753384872.251:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5653 comm="syz.4.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e538e9a9 code=0x7ffc0000 [ 234.672500][ T5695] kvm [5694]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x300000079 [ 234.702788][ T5695] kvm [5694]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x20000009d, nop [ 234.726453][ T5695] kvm [5694]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x6000000d3, nop [ 234.763189][ T5695] kvm [5694]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x7e00000000 [ 235.173068][ T5708] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 235.244937][ T5711] fuse: Bad value for 'fd' [ 235.469247][ T5711] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 235.488551][ T5711] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 235.532941][ T5713] ------------[ cut here ]------------ [ 235.538660][ T5713] WARNING: CPU: 0 PID: 5713 at arch/x86/kvm/x86.c:11214 kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 235.549255][ T5713] Modules linked in: [ 235.553186][ T5713] CPU: 0 PID: 5713 Comm: syz.3.317 Not tainted 6.1.147-syzkaller #0 [ 235.561543][ T5713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 235.571744][ T5713] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 235.578242][ T5713] Code: e8 f7 19 c1 00 e9 4e ef ff ff 44 89 f9 80 e1 07 38 c1 0f 8c db e5 ff ff 4c 89 ff e8 bc 19 c1 00 e9 ce e5 ff ff e8 62 fd 70 00 <0f> 0b e9 da fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c ae eb [ 235.598023][ T5713] RSP: 0018:ffffc9000c8bfc48 EFLAGS: 00010287 [ 235.604122][ T5713] RAX: ffffffff810fc97e RBX: ffff88802f3627c0 RCX: 0000000000080000 [ 235.612164][ T5713] RDX: ffffc9000fbcc000 RSI: 0000000000000998 RDI: 0000000000000999 [ 235.620221][ T5713] RBP: ffff88801fb1f000 R08: dffffc0000000000 R09: fffffbfff215ba69 [ 235.628255][ T5713] R10: fffffbfff215ba69 R11: 1ffffffff215ba68 R12: ffff88802f362aac [ 235.636278][ T5713] R13: ffff88802f362898 R14: dffffc0000000000 R15: 0000000000000000 [ 235.644363][ T5713] FS: 00007f46bbfff6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 235.653365][ T5713] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 235.660000][ T5713] CR2: 00002000000d8000 CR3: 0000000029c6d000 CR4: 00000000003526f0 [ 235.668031][ T5713] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 235.676178][ T5713] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 235.684183][ T5713] Call Trace: [ 235.687519][ T5713] [ 235.690468][ T5713] ? mutex_lock_nested+0x10/0x10 [ 235.695473][ T5713] ? kvm_arch_vcpu_ioctl_run+0x139/0x2390 [ 235.701228][ T5713] kvm_vcpu_ioctl+0x887/0xb80 [ 235.705977][ T5713] ? xa_release+0x50/0x50 [ 235.710425][ T5713] ? __fget_files+0x28/0x4d0 [ 235.715094][ T5713] ? bpf_lsm_file_ioctl+0x5/0x10 [ 235.720060][ T5713] ? security_file_ioctl+0x7c/0xa0 [ 235.725233][ T5713] ? xa_release+0x50/0x50 [ 235.729589][ T5713] __se_sys_ioctl+0xfa/0x170 [ 235.734220][ T5713] do_syscall_64+0x4c/0xa0 [ 235.738711][ T5713] ? clear_bhb_loop+0x60/0xb0 [ 235.743427][ T5713] ? clear_bhb_loop+0x60/0xb0 [ 235.748171][ T5713] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 235.754109][ T5713] RIP: 0033:0x7f46bc18e9a9 [ 235.758600][ T5713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.778278][ T5713] RSP: 002b:00007f46bbfff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 235.786844][ T5713] RAX: ffffffffffffffda RBX: 00007f46bc3b6080 RCX: 00007f46bc18e9a9 [ 235.794870][ T5713] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 235.802956][ T5713] RBP: 00007f46bc210d69 R08: 0000000000000000 R09: 0000000000000000 [ 235.811190][ T5713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.819228][ T5713] R13: 0000000000000000 R14: 00007f46bc3b6080 R15: 00007ffc87ccc248 [ 235.827286][ T5713] [ 235.830336][ T5713] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 235.837628][ T5713] CPU: 0 PID: 5713 Comm: syz.3.317 Not tainted 6.1.147-syzkaller #0 [ 235.845882][ T5713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 235.856035][ T5713] Call Trace: [ 235.859315][ T5713] [ 235.862243][ T5713] dump_stack_lvl+0x168/0x22e [ 235.866936][ T5713] ? memcpy+0x3c/0x60 [ 235.870951][ T5713] ? show_regs_print_info+0x12/0x12 [ 235.876147][ T5713] ? load_image+0x3b0/0x3b0 [ 235.880651][ T5713] panic+0x2c9/0x710 [ 235.884540][ T5713] ? bpf_jit_dump+0xd0/0xd0 [ 235.889043][ T5713] __warn+0x2f8/0x4f0 [ 235.893022][ T5713] ? kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 235.898993][ T5713] ? kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 235.904787][ T5713] report_bug+0x2ba/0x4f0 [ 235.909114][ T5713] ? kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 235.914907][ T5713] handle_bug+0x3a/0x70 [ 235.919072][ T5713] exc_invalid_op+0x16/0x40 [ 235.923667][ T5713] asm_exc_invalid_op+0x16/0x20 [ 235.928524][ T5713] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 235.934938][ T5713] Code: e8 f7 19 c1 00 e9 4e ef ff ff 44 89 f9 80 e1 07 38 c1 0f 8c db e5 ff ff 4c 89 ff e8 bc 19 c1 00 e9 ce e5 ff ff e8 62 fd 70 00 <0f> 0b e9 da fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c ae eb [ 235.954537][ T5713] RSP: 0018:ffffc9000c8bfc48 EFLAGS: 00010287 [ 235.960711][ T5713] RAX: ffffffff810fc97e RBX: ffff88802f3627c0 RCX: 0000000000080000 [ 235.968672][ T5713] RDX: ffffc9000fbcc000 RSI: 0000000000000998 RDI: 0000000000000999 [ 235.976629][ T5713] RBP: ffff88801fb1f000 R08: dffffc0000000000 R09: fffffbfff215ba69 [ 235.984587][ T5713] R10: fffffbfff215ba69 R11: 1ffffffff215ba68 R12: ffff88802f362aac [ 235.992832][ T5713] R13: ffff88802f362898 R14: dffffc0000000000 R15: 0000000000000000 [ 236.000808][ T5713] ? kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 236.006614][ T5713] ? kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 236.012410][ T5713] ? mutex_lock_nested+0x10/0x10 [ 236.017344][ T5713] ? kvm_arch_vcpu_ioctl_run+0x139/0x2390 [ 236.023230][ T5713] kvm_vcpu_ioctl+0x887/0xb80 [ 236.027903][ T5713] ? xa_release+0x50/0x50 [ 236.032225][ T5713] ? __fget_files+0x28/0x4d0 [ 236.036989][ T5713] ? bpf_lsm_file_ioctl+0x5/0x10 [ 236.041919][ T5713] ? security_file_ioctl+0x7c/0xa0 [ 236.047016][ T5713] ? xa_release+0x50/0x50 [ 236.051343][ T5713] __se_sys_ioctl+0xfa/0x170 [ 236.055927][ T5713] do_syscall_64+0x4c/0xa0 [ 236.060358][ T5713] ? clear_bhb_loop+0x60/0xb0 [ 236.065035][ T5713] ? clear_bhb_loop+0x60/0xb0 [ 236.069734][ T5713] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 236.075819][ T5713] RIP: 0033:0x7f46bc18e9a9 [ 236.080249][ T5713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.099871][ T5713] RSP: 002b:00007f46bbfff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 236.108288][ T5713] RAX: ffffffffffffffda RBX: 00007f46bc3b6080 RCX: 00007f46bc18e9a9 [ 236.116699][ T5713] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 236.124667][ T5713] RBP: 00007f46bc210d69 R08: 0000000000000000 R09: 0000000000000000 [ 236.132626][ T5713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.140584][ T5713] R13: 0000000000000000 R14: 00007f46bc3b6080 R15: 00007ffc87ccc248 [ 236.148556][ T5713] [ 236.151867][ T5713] Kernel Offset: disabled [ 236.156237][ T5713] Rebooting in 86400 seconds..