last executing test programs: 1m1.916344648s ago: executing program 4 (id=85): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f040000000000000000008500000005000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10) 1m1.791338848s ago: executing program 4 (id=87): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_BULK(r5, 0xc0185502, &(0x7f0000000400)={{{0x3, 0x1}}, 0x0, 0x6, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1900000004000000040000000800000000000000", @ANYRES32, @ANYRES64=r0, @ANYRES32=0x0, @ANYRES64=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r7, r7, 0x12) 59.523859519s ago: executing program 4 (id=89): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) creat(0x0, 0x0) rename(&(0x7f0000000c00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x4}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x406}]}, 0x70}}, 0x4000010) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x8927, 0x0) setrlimit(0x3, 0x0) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r6 = syz_open_pts(r5, 0x141601) fcntl$setstatus(r6, 0x4, 0x102800) write(r6, &(0x7f0000000000)="d5", 0xfffffedf) dup3(r6, r5, 0x0) 56.247802447s ago: executing program 4 (id=100): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001a00010000000000000000000a00000000000000"], 0x30}}, 0x0) 47.988393107s ago: executing program 4 (id=125): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x41000, 0x25, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000900)={'veth0_macvtap\x00', @random='\x00\x00\x00 \x00'}) 46.414146211s ago: executing program 4 (id=126): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30c) r1 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x2a, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @empty, @empty, @empty, @multicast1}}}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00", 0x12) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') 31.297485216s ago: executing program 32 (id=126): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30c) r1 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x2a, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @empty, @empty, @empty, @multicast1}}}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00", 0x12) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') 22.611763964s ago: executing program 2 (id=198): write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46fe80034a04000000000000000300060000000000fc00000038000000650100008057cbd4"], 0xbe) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000000), 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) 13.105948659s ago: executing program 2 (id=221): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001900010000000000000000000a00"/28], 0x2c}}, 0x0) 9.043403724s ago: executing program 2 (id=234): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8c18cffb703000008000000b704000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 8.776338513s ago: executing program 2 (id=236): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000500)={0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e24, @multicast1}, 0x3ae1fb07b65935cc, 0x0, 0x0, 0x0, 0xe5, 0x0, 0x9, 0x8, 0xff}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) dup(r1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800"}, 0x48, 0xfffffffffffffffd) gettid() timer_settime(0x0, 0x5, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) io_setup(0x7fa, &(0x7f0000001880)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x18}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 7.224189377s ago: executing program 3 (id=241): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f000000cffc), 0x6, 0x800001, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = add_key$user(&(0x7f0000000100), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000140)="ed", 0x1, 0xffffffffffffffff) keyctl$set_timeout(0xf, r4, 0x21000) read$FUSE(r3, &(0x7f00000001c0)={0x2020}, 0x18a8) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000000c0)={[{@discard}, {@bsdgroups}, {@resuid}, {@noblock_validity}, {@minixdf}, {@errors_remount}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000600)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x101091, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='uni_xlate=1,iocharset=iso8859-5,shortname=winnt,nonumtail=0,uni_xlate=1,utf8=0,iocharset=maccroatian,iocharset=macgaelic,allow_utime=00000000000000000000527,nfs,nonumtail=0,iocharset=cp865,uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c636f6465706167653d3835352c004c87a56b54e381762bf87fb98d86d772421a964d437fff01c5e125acb191c125f8030000000000009dba05feee081e91fc61a0fef5511251"], 0x1, 0x238, &(0x7f0000000500)="$eJzs3c9qE10YB+B3krRf+rlIFq5EcEAXrkrbK2iRCmJXShbqQottQZJQsBBoFWNXXoGX5cY78AKE7nRRGJlM0rSQaov5U+rzbHJgzm/Oe5ITspo3r263m1u7ezuH779FtZpEaTVWk6OIepRi4GMAANfJzyyLo6xwuWSlNKmaAIDJuuDv/8IUSwIAJuzps+eP1zY21p+kaTWi/anTSKJ4La6v7cSbaMV2LEUtjiOyE8X44aON9aikuXrca3c7jTzZfvmlf/+17xG9/HLUoj46v5wWTuW7ncZc/N9ffzXPr0Qtbo7Or4zIR2M+7t89Vf9i1OLr69iNVmxFnh3mPyyn6YPs8493L/KK83zS7TT+680byspT/3AAAAAAAAAAAAAAAAAAAAAAALi2FtM0Tfsddbpn+u+Uj3vXF9OB+tn+PEX+vP5A3VP9dZbyJZJi/jBfiVuVqMxy7wAAAAAAAAAAAAAAAAAAAHBV7O0fNDdbre23Yx0MHusf/53/dhDlfmmtJOIK1NMbLOT1TGetOzHhtaK0f9AcnK7mZhJ/SFUndEiyEcevfG5qfkyrz98Y7y6SiJg7eTN/N7kac2P+pgAAAAAAAAAAAAAAAAAAAFM2fOh3xMXDGRQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADMw/P//Swy6/fAFUzPeIgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP+AXwEAAP//QBx8JQ==") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000003c40)=[{{0x0, 0x0, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x810}}], 0x1, 0x40015) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) llistxattr(&(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x0) 6.246265314s ago: executing program 5 (id=173): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) syz_clone(0x4eb82100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0x2000000c) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) 5.004025109s ago: executing program 0 (id=245): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x5, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setsig(r0, 0xa, 0x13) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 4.591702927s ago: executing program 3 (id=246): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0) 4.561852497s ago: executing program 5 (id=247): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000000), 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) 4.107852936s ago: executing program 3 (id=248): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 4.081982106s ago: executing program 0 (id=249): getpid() sched_setaffinity(0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0xe03, 0x2000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x3, 0x6, 0xfffa}, 0x1d, [0x8000, 0xc95a, 0xf, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x49, 0x39cc191b, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x0, 0xe, 0x0, 0x71, 0x7, 0x7, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x8000012f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x2009, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f2e, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xa2ed, 0x4, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x8001, 0x2, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x1000, 0xa1f, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3.884575835s ago: executing program 0 (id=250): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) 3.035855022s ago: executing program 1 (id=251): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000580)=""/83, 0x53}], 0x1}, 0xced}], 0x1, 0x40000002, 0x0) 3.035474022s ago: executing program 0 (id=252): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641c00000000002008fb7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 3.001978352s ago: executing program 3 (id=253): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = gettid() r1 = socket$tipc(0x1e, 0x5, 0x0) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x800) timer_create(0x0, &(0x7f00000005c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 2.841213301s ago: executing program 0 (id=254): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f000000cffc), 0x6, 0x800001, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = add_key$user(&(0x7f0000000100), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000140)="ed", 0x1, 0xffffffffffffffff) keyctl$set_timeout(0xf, r4, 0x21000) read$FUSE(r3, &(0x7f00000001c0)={0x2020}, 0x18a8) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000000c0)={[{@discard}, {@bsdgroups}, {@resuid}, {@noblock_validity}, {@minixdf}, {@errors_remount}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000600)="$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") r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNATTACHFILTER(r6, 0x401054d5, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000003c40)=[{{0x0, 0x0, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x810}}], 0x1, 0x40015) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) llistxattr(&(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x0) 2.57587631s ago: executing program 1 (id=255): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000100)=0x8, 0x4) 1.755078857s ago: executing program 2 (id=256): r0 = accept$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x401c5820, 0x0) lstat(0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext3\x00', &(0x7f0000000140)='./file1\x00', 0x20040, &(0x7f0000000ac0)={[{@delalloc}, {@orlov}, {@jqfmt_vfsv1}, {@nomblk_io_submit}], [{@appraise_type}, {@fowner_lt}]}, 0x1, 0x4a6, &(0x7f0000000580)="$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") setgroups(0x0, 0x0) r1 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x100) r3 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) setreuid(0x0, 0x0) fchdir(r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(r1, 0x0) timer_create(0xd, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(r4, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000000)="8907", 0x2) 1.711752007s ago: executing program 3 (id=257): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) getpid() r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000380)='.log\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x89, 0x0, &(0x7f00000000c0)={0x1, 0x2, [0x1ef, 0x8f5, 0xabe, 0x465]}) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) eventfd(0x400) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e20, 0x6, @remote, 0x1}, 0x1c) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x102, 0x0) sendfile(r4, r4, 0x0, 0x6) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='setgroups\x00') 1.651696427s ago: executing program 1 (id=258): socket$nl_generic(0x11, 0x3, 0x10) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) r4 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)={0x18, 0x14, 0x301, 0x0, 0x0, {0x1e}, [@generic="c1"]}, 0x18}}, 0x0) 1.556072766s ago: executing program 0 (id=259): pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100000001) socket$packet(0x11, 0x2, 0x300) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) pwritev2(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)="fe", 0x1}], 0x1, 0x5405, 0x0, 0x3) 1.213226235s ago: executing program 5 (id=260): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0) writev(r0, &(0x7f0000000a40)=[{&(0x7f0000000240)="d18a876f8f", 0x5}], 0x1) 163.501711ms ago: executing program 3 (id=261): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=@base={0x5, 0x5, 0xfff, 0x7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 135.067431ms ago: executing program 1 (id=262): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000000000049"]) 71.739971ms ago: executing program 5 (id=263): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x80ffff, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 28.044681ms ago: executing program 1 (id=264): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000fc0)={{r0}, &(0x7f0000000f40), &(0x7f0000000f80)='%-010d \x00'}, 0x20) 7.654571ms ago: executing program 2 (id=265): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000380)=0xffffffff) ioctl$PPPIOCSACTIVE(r2, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) readv(r2, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/98, 0x62}], 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 0s ago: executing program 1 (id=266): socketpair$tipc(0x1e, 0x1, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x38, r3, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x38, r3, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6b32}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.116' (ED25519) to the list of known hosts. syzkaller login: [ 52.750752][ T4161] cgroup: Unknown subsys name 'net' [ 52.883801][ T4161] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 54.234449][ T4161] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 55.513352][ T4174] chnl_net:caif_netlink_parms(): no params data found [ 55.618109][ T4174] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.625791][ T4174] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.634227][ T4174] device bridge_slave_0 entered promiscuous mode [ 55.645164][ T4174] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.652327][ T4174] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.660279][ T4174] device bridge_slave_1 entered promiscuous mode [ 55.695540][ T4178] chnl_net:caif_netlink_parms(): no params data found [ 55.732384][ T4174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.749004][ T4174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.790217][ T4174] team0: Port device team_slave_0 added [ 55.798788][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 55.818529][ T4174] team0: Port device team_slave_1 added [ 55.888682][ T4174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.895639][ T4174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.921609][ T4174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.940204][ T4178] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.947266][ T4178] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.955380][ T4178] device bridge_slave_0 entered promiscuous mode [ 55.964093][ T4178] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.971222][ T4178] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.979300][ T4178] device bridge_slave_1 entered promiscuous mode [ 55.992933][ T4174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.000107][ T4174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.026075][ T4174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.127398][ T4178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.141538][ T4174] device hsr_slave_0 entered promiscuous mode [ 56.149107][ T4174] device hsr_slave_1 entered promiscuous mode [ 56.155971][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.163290][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.171511][ T4181] device bridge_slave_0 entered promiscuous mode [ 56.179205][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 56.191909][ T4180] chnl_net:caif_netlink_parms(): no params data found [ 56.203019][ T4178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.220977][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.228074][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.236538][ T4181] device bridge_slave_1 entered promiscuous mode [ 56.310497][ T4178] team0: Port device team_slave_0 added [ 56.323317][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.350443][ T4178] team0: Port device team_slave_1 added [ 56.363176][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.456024][ T4180] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.463278][ T4180] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.471891][ T4180] device bridge_slave_0 entered promiscuous mode [ 56.479806][ T4178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.486754][ T4178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.513304][ T4178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.527028][ T4181] team0: Port device team_slave_0 added [ 56.551605][ T4180] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.558821][ T4180] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.566595][ T4180] device bridge_slave_1 entered promiscuous mode [ 56.574093][ T4178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.581065][ T4178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.607014][ T4178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.619595][ T4181] team0: Port device team_slave_1 added [ 56.633071][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.640218][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.647936][ T4182] device bridge_slave_0 entered promiscuous mode [ 56.684044][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.691317][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.700090][ T4182] device bridge_slave_1 entered promiscuous mode [ 56.708836][ T4180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.727272][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.734475][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.760743][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.774001][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.781236][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.807525][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.833599][ T4180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.879989][ T4178] device hsr_slave_0 entered promiscuous mode [ 56.887090][ T4178] device hsr_slave_1 entered promiscuous mode [ 56.894159][ T4178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.902089][ T4178] Cannot create hsr debugfs directory [ 56.920390][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.955754][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.967952][ T4180] team0: Port device team_slave_0 added [ 56.984060][ T4181] device hsr_slave_0 entered promiscuous mode [ 56.990896][ T4181] device hsr_slave_1 entered promiscuous mode [ 56.997745][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.005439][ T4181] Cannot create hsr debugfs directory [ 57.020223][ T4180] team0: Port device team_slave_1 added [ 57.062069][ T4182] team0: Port device team_slave_0 added [ 57.093658][ T4182] team0: Port device team_slave_1 added [ 57.113360][ T4180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.120475][ T4180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.146796][ T4180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.160203][ T4180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.167154][ T4180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.193867][ T4180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.215414][ T4174] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.248140][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.256176][ T4165] Bluetooth: hci0: command 0x0409 tx timeout [ 57.259962][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.288862][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.300140][ T4174] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.312064][ T4174] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.330025][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.336961][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.363203][ T1107] Bluetooth: hci1: command 0x0409 tx timeout [ 57.363773][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.387997][ T4174] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.408769][ T4203] Bluetooth: hci3: command 0x0409 tx timeout [ 57.416260][ T4203] Bluetooth: hci4: command 0x0409 tx timeout [ 57.423053][ T4203] Bluetooth: hci2: command 0x0409 tx timeout [ 57.465808][ T4180] device hsr_slave_0 entered promiscuous mode [ 57.472807][ T4180] device hsr_slave_1 entered promiscuous mode [ 57.479487][ T4180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.487026][ T4180] Cannot create hsr debugfs directory [ 57.509230][ T4182] device hsr_slave_0 entered promiscuous mode [ 57.516055][ T4182] device hsr_slave_1 entered promiscuous mode [ 57.522796][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.530430][ T4182] Cannot create hsr debugfs directory [ 57.701311][ T4178] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.717239][ T4178] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.726878][ T4178] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.739109][ T4178] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.830749][ T4181] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.840222][ T4181] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.857794][ T4181] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.867116][ T4181] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.914805][ T4174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.937969][ T4182] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.970158][ T4182] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.981995][ T4174] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.989024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.000340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.019111][ T4178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.032186][ T4182] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.042178][ T4182] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.081448][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.091455][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.100891][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.108135][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.116688][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.126097][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.134778][ T4180] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.148217][ T4180] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.167443][ T4178] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.179720][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.187806][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.196909][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.205814][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.212919][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.221358][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.231960][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.240670][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.250423][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.259048][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.266121][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.275537][ T4180] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.287547][ T4180] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.310457][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.318335][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.327596][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.336780][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.346002][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.355102][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.362205][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.370470][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.382079][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.413163][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.421990][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.432519][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.442328][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.453561][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.462519][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.472697][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.481420][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.490983][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.499739][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.508049][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.516849][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.532790][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.541532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.551384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.560968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.583427][ T4178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.594887][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.603282][ T4174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.666355][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.683594][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.706351][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.754483][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.763969][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.773569][ T554] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.780675][ T554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.790928][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.799614][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.807994][ T554] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.815090][ T554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.823454][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.832826][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.841712][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.850925][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.859519][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.867405][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.888142][ T4181] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.906914][ T4181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.946608][ T4180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.953797][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.963023][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.971991][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.982357][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.991250][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.000515][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.009122][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.040592][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.048181][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.063059][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.074060][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.090906][ T4178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.110364][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.124996][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.137362][ T4174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.153961][ T4180] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.188797][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.197745][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.207555][ T554] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.214686][ T554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.222738][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.231243][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.239143][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.247773][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.263052][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.288143][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.303467][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.314404][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.328300][ T554] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.335400][ T554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.343451][ T4218] Bluetooth: hci0: command 0x041b tx timeout [ 59.351368][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.361623][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.370793][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.392603][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.407298][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.416910][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.418994][ T4218] Bluetooth: hci1: command 0x041b tx timeout [ 59.439792][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.449357][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.457174][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.478262][ T4174] device veth0_vlan entered promiscuous mode [ 59.487164][ T4178] device veth0_vlan entered promiscuous mode [ 59.504039][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.510750][ T4165] Bluetooth: hci2: command 0x041b tx timeout [ 59.517079][ T4165] Bluetooth: hci4: command 0x041b tx timeout [ 59.523367][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.532456][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.540955][ T4165] Bluetooth: hci3: command 0x041b tx timeout [ 59.545888][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.555567][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.564725][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.573788][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.582755][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.590635][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.598281][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.606372][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.614219][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.636103][ T4178] device veth1_vlan entered promiscuous mode [ 59.646207][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.656475][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.666879][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.676585][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.685471][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.697281][ T4174] device veth1_vlan entered promiscuous mode [ 59.713137][ T4180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.737850][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.748068][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.757302][ T554] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.764492][ T554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.805998][ T4174] device veth0_macvtap entered promiscuous mode [ 59.820885][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.834075][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.842842][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.854719][ T554] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.861832][ T554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.869860][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.878357][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.888083][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.896829][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.908007][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.920524][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.929520][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.956069][ T4181] device veth0_vlan entered promiscuous mode [ 59.963685][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.981539][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.997520][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.006511][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.015540][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.024480][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.034984][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.044852][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.054278][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.068078][ T4174] device veth1_macvtap entered promiscuous mode [ 60.084857][ T4181] device veth1_vlan entered promiscuous mode [ 60.094549][ T4178] device veth0_macvtap entered promiscuous mode [ 60.105572][ T4178] device veth1_macvtap entered promiscuous mode [ 60.123214][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.131680][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.140825][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.149684][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.157635][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.166362][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.174987][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.184095][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.197447][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.211109][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.249541][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.258207][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.269792][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.278149][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.287051][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.303134][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.311064][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.324557][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.334965][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.347348][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.358981][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.371104][ T4180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.384731][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.394384][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.409559][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.418180][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.439585][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.450908][ T4174] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.460828][ T4174] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.469878][ T4174] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.479394][ T4174] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.491088][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.501846][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.513985][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.530154][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.537362][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.547614][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.556575][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.565894][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.574820][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.582589][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.591328][ T4181] device veth0_macvtap entered promiscuous mode [ 60.624112][ T4181] device veth1_macvtap entered promiscuous mode [ 60.636897][ T4178] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.646377][ T4178] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.655297][ T4178] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.664070][ T4178] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.713509][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.721778][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.729980][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.740065][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.749134][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.757697][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.783571][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.802712][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.812656][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.823123][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.834611][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.845774][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.857292][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.867542][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.878246][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.890736][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.903423][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.912627][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.921307][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.930386][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.939609][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.948105][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.956871][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.964661][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.979411][ T4180] device veth0_vlan entered promiscuous mode [ 60.995668][ T4181] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.004560][ T4181] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.014948][ T4181] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.023958][ T4181] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.047571][ T4180] device veth1_vlan entered promiscuous mode [ 61.081096][ T4182] device veth0_vlan entered promiscuous mode [ 61.087724][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.097149][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.106205][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.115136][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.124178][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.139143][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.153258][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.200749][ T4182] device veth1_vlan entered promiscuous mode [ 61.207496][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.217993][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.226498][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.314613][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.314674][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.323177][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.341047][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.346130][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.364533][ T4180] device veth0_macvtap entered promiscuous mode [ 61.373141][ T3087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.383149][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.383882][ T3087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.392562][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.407941][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.416537][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.425071][ T4239] Bluetooth: hci0: command 0x040f tx timeout [ 61.426589][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.444094][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.449180][ T4182] device veth0_macvtap entered promiscuous mode [ 61.462352][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.475540][ T4180] device veth1_macvtap entered promiscuous mode [ 61.503027][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.508818][ T4203] Bluetooth: hci1: command 0x040f tx timeout [ 61.519703][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.527984][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.539486][ T4182] device veth1_macvtap entered promiscuous mode [ 61.560435][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.571979][ T4165] Bluetooth: hci3: command 0x040f tx timeout [ 61.577088][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 61.580231][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.584451][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 61.600967][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.612107][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.622295][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.633076][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.644577][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.663870][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.674898][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.686076][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.696841][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.707054][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.718057][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.730907][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.756560][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.771073][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.781950][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.793530][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.804291][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.827419][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.831048][ T4180] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.842327][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.847644][ T4180] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.864184][ T4180] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.873352][ T4180] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.888256][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.899690][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.910118][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.920662][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.930748][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.941831][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.952072][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.965836][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.979219][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.991908][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.000924][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.011672][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.045371][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.054229][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.067510][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.071826][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.084948][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.095683][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.105588][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.116352][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.126418][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.137763][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.152203][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.176211][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.185579][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.194712][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.208029][ T4182] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.227614][ T4182] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.246618][ T4182] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.261432][ T4182] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.276044][ T4251] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 62.586648][ T554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.636133][ T554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.763866][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.811875][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.831825][ T3087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.831878][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.845412][ T3087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.547133][ T4263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.739973][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.940786][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.949499][ T4263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.338381][ C1] sched: RT throttling activated [ 64.353752][ T4165] Bluetooth: hci0: command 0x0419 tx timeout [ 64.359953][ T4165] Bluetooth: hci1: command 0x0419 tx timeout [ 64.366081][ T4165] Bluetooth: hci2: command 0x0419 tx timeout [ 64.372880][ T4165] Bluetooth: hci4: command 0x0419 tx timeout [ 64.378926][ T4165] Bluetooth: hci3: command 0x0419 tx timeout [ 64.928647][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.073380][ T4279] loop3: detected capacity change from 0 to 512 [ 67.093392][ T4284] loop2: detected capacity change from 0 to 256 [ 67.360381][ T4279] ======================================================= [ 67.360381][ T4279] WARNING: The mand mount option has been deprecated and [ 67.360381][ T4279] and is ignored by this kernel. Remove the mand [ 67.360381][ T4279] option from the mount to silence this warning. [ 67.360381][ T4279] ======================================================= [ 68.399557][ T4279] EXT4-fs (loop3): orphan cleanup on readonly fs [ 68.432003][ T4279] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.4: bg 0: block 248: padding at end of block bitmap is not set [ 68.453861][ T4279] Quota error (device loop3): write_blk: dquota write failed [ 68.461886][ T4279] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 68.472040][ T4279] EXT4-fs error (device loop3): ext4_acquire_dquot:6197: comm syz.3.4: Failed to acquire dquot type 1 [ 68.493752][ T4279] EXT4-fs (loop3): 1 truncate cleaned up [ 68.509808][ T4279] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 68.710390][ T4279] syz.3.4 (4279) used greatest stack depth: 19200 bytes left [ 69.024068][ T4294] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 70.784569][ T4315] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 71.695998][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.702879][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.925216][ T4329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.944690][ T4329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 72.634709][ T4334] loop0: detected capacity change from 0 to 2048 [ 73.429844][ T4334] EXT4-fs (loop0): mounted filesystem without journal. Opts: acl,,errors=continue. Quota mode: none. [ 73.477365][ T4325] loop4: detected capacity change from 0 to 32768 [ 74.115955][ T4333] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 74.132293][ T4333] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 28 [ 74.144796][ T4333] EXT4-fs (loop0): This should not happen!! Data will be lost [ 74.144796][ T4333] [ 74.298472][ T4333] EXT4-fs (loop0): Total free blocks count 0 [ 74.304642][ T4333] EXT4-fs (loop0): Free/Dirty block details [ 74.310688][ T4333] EXT4-fs (loop0): free_blocks=2415919104 [ 74.316523][ T4333] EXT4-fs (loop0): dirty_blocks=16 [ 74.321709][ T4333] EXT4-fs (loop0): Block reservation details [ 74.327740][ T4333] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 76.696194][ T4377] overlayfs: missing 'lowerdir' [ 76.810062][ T4381] loop2: detected capacity change from 0 to 16 [ 76.839661][ T4381] erofs: Unknown parameter '’’’’’’’’18446744073709551615’0xffffffffffffffff’’’’18446744073709551615ß©>f”‰W­zq½‚' [ 77.060219][ T4387] loop1: detected capacity change from 0 to 2048 [ 77.269687][ T4387] FAT-fs (loop1): Unrecognized mount option "’18446744073709551615’’’’" or missing value [ 78.165435][ T4381] loop2: detected capacity change from 0 to 1024 [ 78.374622][ T4381] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 78.406087][ T4381] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.772452][ T4413] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 16: comm syz.2.38: path /10/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0 [ 80.288166][ T4411] loop1: detected capacity change from 0 to 4096 [ 81.414073][ T4411] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_dev=0x0000000000000008,nogrpid,init_itable,dioread_nolock,errors=remount-ro,. Quota mode: writeback. [ 81.490551][ T21] cfg80211: failed to load regulatory.db [ 81.561022][ T4428] mmap: syz.4.46 (4428) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 81.607688][ T26] audit: type=1800 audit(1737948401.535:2): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.50" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 81.869922][ T4430] loop2: detected capacity change from 0 to 4096 [ 81.879935][ T26] audit: type=1800 audit(1737948401.815:3): pid=4432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.50" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 81.964731][ T4430] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_dev=0x0000000000000008,nogrpid,init_itable,dioread_nolock,errors=remount-ro,. Quota mode: writeback. [ 82.129602][ T26] audit: type=1800 audit(1737948402.065:4): pid=4430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.54" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 82.435292][ T26] audit: type=1800 audit(1737948402.365:5): pid=4444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.54" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 83.998403][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 84.008323][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 84.022620][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 84.034970][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 84.088440][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 84.105822][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 84.118415][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 84.138436][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 84.148233][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 84.162036][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 84.805133][ T4476] loop2: detected capacity change from 0 to 512 [ 84.887729][ T4476] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 84.931299][ T4476] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 85.210356][ T4476] EXT4-fs (loop2): 1 truncate cleaned up [ 85.219560][ T4476] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 85.490641][ T4493] loop2: detected capacity change from 0 to 512 [ 85.586306][ T4498] netlink: 28 bytes leftover after parsing attributes in process `syz.0.76'. [ 85.629744][ T4493] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 85.641102][ T4498] tipc: Started in network mode [ 85.647668][ T4493] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.660619][ T4498] tipc: Node identity 7, cluster identity 5 [ 85.681189][ T4498] tipc: Node number set to 7 [ 86.024161][ T4508] loop4: detected capacity change from 0 to 512 [ 86.278181][ T4508] EXT4-fs (loop4): Invalid want_extra_isize 2047 [ 86.706564][ T4504] loop4: detected capacity change from 0 to 512 [ 86.755514][ T4504] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 86.766665][ T4504] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.784491][ T4510] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 87.155405][ T4523] syz.4.82[4523] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.155551][ T4523] syz.4.82[4523] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.193290][ T4524] overlayfs: failed to resolve './file0': -2 [ 87.245072][ T4526] syz.4.82[4526] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.245200][ T4526] syz.4.82[4526] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.654304][ T4530] netlink: 'syz.1.84': attribute type 13 has an invalid length. [ 88.134475][ T4530] gretap0: refused to change device tx_queue_len [ 88.149034][ T4530] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 88.436496][ T4507] loop0: detected capacity change from 0 to 40427 [ 89.159636][ T4541] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.87' sets config #0 [ 94.460548][ T4592] netlink: 20 bytes leftover after parsing attributes in process `syz.4.100'. [ 95.482795][ T4609] loop3: detected capacity change from 0 to 512 [ 96.508682][ T4609] EXT4-fs (loop3): Invalid want_extra_isize 2047 [ 97.019630][ T4608] loop3: detected capacity change from 0 to 512 [ 98.065158][ T4608] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 98.076461][ T4608] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.560834][ T4642] netlink: 'syz.0.114': attribute type 4 has an invalid length. [ 99.717814][ T4642] syz.0.114 (4642) used greatest stack depth: 19040 bytes left [ 100.448470][ T4657] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (2049) [ 101.666347][ T4671] loop1: detected capacity change from 0 to 1024 [ 103.312958][ T4679] loop2: detected capacity change from 0 to 40427 [ 103.357404][ T4671] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.122: Invalid block bitmap block 0 in block_group 0 [ 103.382894][ T4679] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 103.390906][ T4679] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 103.425177][ T4679] F2FS-fs (loop2): invalid crc value [ 103.476509][ T4679] F2FS-fs (loop2): Found nat_bits in checkpoint [ 103.540661][ T4671] Quota error (device loop1): write_blk: dquota write failed [ 103.553346][ T4679] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 103.560674][ T4679] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 103.638930][ T4671] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 103.863872][ T4671] EXT4-fs error (device loop1): ext4_acquire_dquot:6197: comm syz.1.122: Failed to acquire dquot type 0 [ 103.950881][ T4389] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 103.969299][ T4671] EXT4-fs error (device loop1): ext4_free_blocks:6223: comm syz.1.122: Freeing blocks not in datazone - block = 0, count = 4096 [ 104.009280][ T4389] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 104.026627][ T4690] bridge0: port 3(syz_tun) entered blocking state [ 104.033883][ T4690] bridge0: port 3(syz_tun) entered disabled state [ 104.041939][ T4690] device syz_tun entered promiscuous mode [ 104.048592][ T4690] bridge0: port 3(syz_tun) entered blocking state [ 104.055352][ T4690] bridge0: port 3(syz_tun) entered forwarding state [ 104.077123][ T4671] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.122: Invalid inode bitmap blk 0 in block_group 0 [ 104.093705][ T4287] Quota error (device loop1): remove_tree: Getting block too big (0 >= 9) [ 104.122066][ T4287] EXT4-fs error (device loop1): ext4_release_dquot:6220: comm kworker/u4:8: Failed to release dquot type 0 [ 104.140821][ T4671] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 104.191278][ T4671] EXT4-fs (loop1): 1 orphan inode deleted [ 104.199270][ T4671] EXT4-fs (loop1): mounted filesystem without journal. Opts: €; ,errors=continue. Quota mode: writeback. [ 104.341819][ T554] Quota error (device loop1): remove_tree: Getting block too big (0 >= 9) [ 104.354854][ T554] EXT4-fs error (device loop1): ext4_release_dquot:6220: comm kworker/u4:3: Failed to release dquot type 0 [ 106.519106][ T4725] loop0: detected capacity change from 0 to 512 [ 107.112174][ T4727] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.121193][ T4727] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.262110][ T4725] EXT4-fs (loop0): 1 orphan inode deleted [ 107.267874][ T4725] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 107.546886][ T4725] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.292190][ T4735] loop1: detected capacity change from 0 to 2048 [ 109.910801][ T4735] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 110.646884][ T4749] syz.2.147[4749] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.646993][ T4749] syz.2.147[4749] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.979277][ T4789] tmpfs: Unknown parameter 'gnd' [ 113.893028][ T4793] loop2: detected capacity change from 0 to 2048 [ 114.706180][ T4801] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 114.941321][ T4799] loop1: detected capacity change from 0 to 128 [ 115.068795][ T4793] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 115.329393][ T4813] attempt to access beyond end of device [ 115.329393][ T4813] loop1: rw=2049, want=337, limit=128 [ 116.119214][ T26] audit: type=1326 audit(1737948436.045:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4819 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a21d5ed29 code=0x7ffc0000 [ 116.201565][ T4740] attempt to access beyond end of device [ 116.201565][ T4740] loop1: rw=1, want=265, limit=128 [ 116.213698][ T26] audit: type=1326 audit(1737948436.055:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4819 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f0a21d5ed29 code=0x7ffc0000 [ 116.237966][ T4824] xt_hashlimit: size too large, truncated to 1048576 [ 116.344420][ T26] audit: type=1326 audit(1737948436.055:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4819 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a21d5ed29 code=0x7ffc0000 [ 116.380788][ T4815] bridge0: port 3(gretap1) entered blocking state [ 116.425501][ T4815] bridge0: port 3(gretap1) entered disabled state [ 116.471488][ T26] audit: type=1326 audit(1737948436.055:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4819 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0a21d5ed29 code=0x7ffc0000 [ 116.585613][ T4815] device gretap1 entered promiscuous mode [ 117.063914][ T26] audit: type=1326 audit(1737948436.055:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4819 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a21d5ed29 code=0x7ffc0000 [ 117.219577][ T4815] bridge0: port 3(gretap1) entered blocking state [ 117.226092][ T4815] bridge0: port 3(gretap1) entered forwarding state [ 117.332700][ T4823] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 117.350819][ T4823] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 117.360084][ C0] bridge0: received packet on gretap1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 117.374562][ C0] bridge0: received packet on gretap1 with own address as source address (addr:ee:4f:aa:23:fe:25, vlan:0) [ 117.418469][ T26] audit: type=1326 audit(1737948436.055:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4819 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f0a21d5ed29 code=0x7ffc0000 [ 117.467995][ T4823] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 117.494762][ T4823] device bridge_slave_0 left promiscuous mode [ 117.520627][ T4823] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.529816][ T26] audit: type=1326 audit(1737948436.055:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4819 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a21d5ed29 code=0x7ffc0000 [ 117.802437][ C0] bridge0: received packet on gretap1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 118.451480][ C0] bridge0: received packet on gretap1 with own address as source address (addr:ee:4f:aa:23:fe:25, vlan:0) [ 118.619584][ C1] bridge0: received packet on gretap1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 119.362243][ T4823] device bridge_slave_1 left promiscuous mode [ 119.388834][ T4823] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.417019][ T4823] bond0: (slave bond_slave_0): Releasing backup interface [ 119.469017][ T4823] bond0: (slave bond_slave_1): Releasing backup interface [ 119.542563][ T4823] team0: Port device team_slave_0 removed [ 119.598711][ T4823] team0: Port device team_slave_1 removed [ 119.605072][ T4823] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.619929][ T4823] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.630097][ T4823] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.637508][ T4823] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.653879][ T4823] device gretap1 left promiscuous mode [ 119.662687][ T4823] bridge0: port 3(gretap1) entered disabled state [ 119.677289][ T4837] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.820657][ T4837] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.924976][ T4181] bridge0: port 3(syz_tun) entered disabled state [ 119.936573][ T4823] syz.3.166 (4823) used greatest stack depth: 18328 bytes left [ 119.957254][ T4181] device syz_tun left promiscuous mode [ 119.983816][ T4181] bridge0: port 3(syz_tun) entered disabled state [ 120.832639][ T4840] chnl_net:caif_netlink_parms(): no params data found [ 121.374871][ T4239] Bluetooth: hci5: command 0x0409 tx timeout [ 121.540526][ T4840] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.548538][ T4840] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.557282][ T4840] device bridge_slave_0 entered promiscuous mode [ 121.570146][ T4840] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.577820][ T4840] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.587916][ T4840] device bridge_slave_1 entered promiscuous mode [ 121.635516][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.673835][ T4840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.687095][ T4840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.732091][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.846809][ T4840] team0: Port device team_slave_0 added [ 121.891502][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.992054][ T4840] team0: Port device team_slave_1 added [ 122.030147][ T26] audit: type=1804 audit(1737948441.965:13): pid=4881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.186" name="/newroot/45/file0/bus" dev="overlay" ino=265 res=1 errno=0 [ 122.101164][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.147665][ T26] audit: type=1804 audit(1737948441.965:14): pid=4881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.186" name="/newroot/45/file0/bus" dev="overlay" ino=265 res=1 errno=0 [ 122.195218][ T4840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.228944][ T4840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.337814][ T4840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.427372][ T4840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.484093][ T4840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.637229][ T4840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.677981][ T4885] loop1: detected capacity change from 0 to 1024 [ 122.849299][ T4840] device hsr_slave_0 entered promiscuous mode [ 122.886943][ T4885] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,lazytime,noblock_validity,,errors=continue. Quota mode: none. [ 122.920908][ T4840] device hsr_slave_1 entered promiscuous mode [ 123.004022][ T4840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.086352][ T4840] Cannot create hsr debugfs directory [ 123.408683][ T4215] Bluetooth: hci5: command 0x041b tx timeout [ 123.513618][ T4899] loop3: detected capacity change from 0 to 512 [ 123.631800][ T4902] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 124.322832][ T4899] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 124.334376][ T4899] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.525720][ T4906] loop1: detected capacity change from 0 to 512 [ 124.537054][ T4906] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 125.179957][ T4906] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.191: bad orphan inode 131083 [ 125.308663][ T4906] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 125.495928][ T4215] Bluetooth: hci5: command 0x040f tx timeout [ 125.734079][ T4840] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 125.755048][ T4840] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 125.977341][ T4840] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 126.041235][ T4840] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 127.380670][ T4937] device syzkaller0 entered promiscuous mode [ 127.520212][ T4913] loop3: detected capacity change from 0 to 8192 [ 127.569363][ T13] Bluetooth: hci5: command 0x0419 tx timeout [ 127.590518][ T4913] loop3: p4 < > [ 127.686864][ T4952] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 127.709797][ T4840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.774266][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 127.800659][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 127.831736][ T4840] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.869838][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 127.911506][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 127.949602][ T4445] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.956741][ T4445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.012265][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 128.090072][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 128.120127][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 128.148640][ T4445] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.155744][ T4445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.988547][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 129.035837][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 129.051497][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 129.099013][ T4981] loop0: detected capacity change from 0 to 1024 [ 129.130186][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 129.304184][ T4981] EXT4-fs (loop0): Ignoring removed orlov option [ 129.310612][ T4981] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 130.187090][ T4987] loop1: detected capacity change from 0 to 128 [ 130.547506][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 130.586049][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 130.653182][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 130.692927][ T4981] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 132.143618][ T4996] loop3: detected capacity change from 0 to 128 [ 132.313589][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 132.424257][ T4996] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 132.597940][ T4996] FAT-fs (loop3): FAT read failed (blocknr 128) [ 132.690530][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.696886][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.711086][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 133.145665][ T5006] loop0: detected capacity change from 0 to 256 [ 133.205734][ T5007] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 133.217386][ T5006] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 133.234345][ T5006] FAT-fs (loop0): Filesystem has been set read-only [ 133.242647][ T5006] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 133.251292][ T5006] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 133.260020][ T5006] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 133.269009][ T5006] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 133.277674][ T5006] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 133.286404][ T5006] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 133.295377][ T5006] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 133.430432][ T5006] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 133.439043][ T5006] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 133.447642][ T5006] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 133.456297][ T5006] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 133.464867][ T5006] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 133.473462][ T5006] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 133.482025][ T5006] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 133.490594][ T5006] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 133.499185][ T5006] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 133.507717][ T5006] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 133.516288][ T5006] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 133.524882][ T5006] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 133.535235][ T5006] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 133.543817][ T5006] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 133.552391][ T5006] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 133.560934][ T5006] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 133.570383][ T26] audit: type=1800 audit(1737948453.505:15): pid=5006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.208" name="file1" dev="loop0" ino=1048594 res=0 errno=0 [ 133.607781][ T9] device hsr_slave_0 left promiscuous mode [ 133.646310][ T9] device hsr_slave_1 left promiscuous mode [ 133.698082][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.078554][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.090334][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.090368][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.307247][ T9] device bridge_slave_1 left promiscuous mode [ 135.318433][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.427522][ T9] device bridge_slave_0 left promiscuous mode [ 135.452509][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.578288][ T9] device veth1_macvtap left promiscuous mode [ 135.595271][ T9] device veth0_macvtap left promiscuous mode [ 135.606653][ T9] device veth1_vlan left promiscuous mode [ 135.615418][ T9] device veth0_vlan left promiscuous mode [ 136.008918][ T9] team0 (unregistering): Port device team_slave_1 removed [ 136.038927][ T9] team0 (unregistering): Port device team_slave_0 removed [ 136.063371][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.098906][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.165102][ T5027] loop0: detected capacity change from 0 to 40427 [ 136.216799][ T5027] F2FS-fs (loop0): invalid crc value [ 136.235619][ T5027] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 136.286355][ T9] bond0 (unregistering): Released all slaves [ 136.353142][ T5027] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 136.415897][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 136.434536][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 136.461324][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 136.470916][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 136.478324][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 136.595715][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 136.978944][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 136.987060][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 137.023756][ T4840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.173042][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 138.188928][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 138.265950][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 138.294527][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 138.329227][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 138.376159][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 138.440148][ T4840] device veth0_vlan entered promiscuous mode [ 138.486468][ T4840] device veth1_vlan entered promiscuous mode [ 138.623281][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 138.639572][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 138.687520][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 138.722878][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 138.753082][ T4840] device veth0_macvtap entered promiscuous mode [ 138.785999][ T4840] device veth1_macvtap entered promiscuous mode [ 138.838935][ T5077] netlink: 16 bytes leftover after parsing attributes in process `syz.2.221'. [ 138.882821][ T5086] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 139.799807][ T4840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.868646][ T4840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.952643][ T4840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.371998][ T4840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.620674][ T4840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.837488][ T4840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.980014][ T4840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.049427][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 141.059048][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 141.132442][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 141.188314][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 141.258628][ T4840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.315298][ T4840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.399467][ T4840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.461133][ T4840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.521736][ T4840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.571123][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 141.614135][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 141.676750][ T4840] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.706256][ T4840] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.784180][ T4840] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.808303][ T4840] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.853879][ T5137] loop0: detected capacity change from 0 to 512 [ 142.076094][ T5139] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 142.401074][ T5137] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 142.668560][ T5137] ext4 filesystem being mounted at /48/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 142.781862][ T5144] loop1: detected capacity change from 0 to 1024 [ 142.969224][ T4287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.025216][ T4287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.352506][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 143.374668][ T1442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.399113][ T1442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.465740][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 143.612926][ T5144] EXT4-fs (loop1): Test dummy encryption mode enabled [ 143.645904][ T5144] EXT4-fs (loop1): Test dummy encryption mode enabled [ 143.737129][ T5144] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,stripe=0x0000000000000007,commit=0x0000000000000005,test_dummy_encryption,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,grpid,,errors=continue. Quota mode: writeback. [ 144.138812][ T5167] loop3: detected capacity change from 0 to 1024 [ 145.006944][ T5167] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,bsdgroups,resuid=0x0000000000000000,noblock_validity,minixdf,errors=remount-ro,journal_ioprio=0x0000000000000006,data_err=abort,. Quota mode: writeback. [ 145.080984][ T5165] EXT4-fs error (device loop3): ext4_xattr_ibody_list:748: inode #2: comm syz.3.241: corrupted in-inode xattr [ 145.121766][ T5165] EXT4-fs (loop3): Remounting filesystem read-only [ 145.354635][ T4180] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2746: inode #2: comm syz-executor: corrupted in-inode xattr [ 145.429128][ T4180] EXT4-fs (loop3): Remounting filesystem read-only [ 145.435701][ T4180] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2816: Unable to expand inode 2. Delete some EAs or run e2fsck. [ 147.568192][ T5220] loop0: detected capacity change from 0 to 1024 [ 147.868270][ T5220] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,bsdgroups,resuid=0x0000000000000000,noblock_validity,minixdf,errors=remount-ro,journal_ioprio=0x0000000000000006,data_err=abort,. Quota mode: writeback. [ 148.302068][ T5224] loop2: detected capacity change from 0 to 512 [ 149.859629][ T5245] ------------[ cut here ]------------ [ 149.865133][ T5245] trace type BPF program uses run-time allocation [ 149.934141][ T5245] WARNING: CPU: 0 PID: 5245 at kernel/bpf/verifier.c:11729 check_map_prog_compatibility+0x720/0x8c0 [ 149.965012][ T5247] loop0: detected capacity change from 0 to 2048 [ 149.988509][ T5245] Modules linked in: [ 150.018882][ T5245] CPU: 0 PID: 5245 Comm: syz.3.261 Not tainted 5.15.177-syzkaller #0 [ 150.046525][ T5260] tipc: Started in network mode [ 150.065083][ T5245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 150.078983][ T5260] tipc: Node identity 7, cluster identity 4711 [ 150.094434][ T5245] RIP: 0010:check_map_prog_compatibility+0x720/0x8c0 [ 150.107975][ T5260] tipc: Node number set to 7 [ 150.134246][ T5245] Code: ed e9 ec fc ff ff e8 3f b8 ee ff 31 ed e9 e0 fc ff ff e8 33 b8 ee ff c6 05 36 1f 65 0c 01 48 c7 c7 a0 3a b1 8a e8 c0 51 ba ff <0f> 0b e9 4a fb ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 4f f9 ff [ 150.155853][ T5260] tipc: Cannot configure node identity twice [ 150.165954][ T5247] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 150.268478][ T5254] netlink: 96 bytes leftover after parsing attributes in process `syz.3.261'. [ 150.277867][ T5245] RSP: 0018:ffffc900032ff348 EFLAGS: 00010246 [ 150.288121][ T5247] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 150.295131][ T5245] RAX: 923f49bfc2fa3600 RBX: 0000000000000011 RCX: 0000000000080000 [ 150.304885][ T5247] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 150.323828][ T5247] EXT4-fs (loop0): This should not happen!! Data will be lost [ 150.323828][ T5247] [ 150.334403][ T5247] EXT4-fs (loop0): Total free blocks count 0 [ 150.340823][ T5247] EXT4-fs (loop0): Free/Dirty block details [ 150.346762][ T5247] EXT4-fs (loop0): free_blocks=2415919504 [ 150.350163][ T5245] RDX: ffffc9000de99000 RSI: 0000000000003ec3 RDI: 0000000000003ec4 [ 150.352569][ T5247] EXT4-fs (loop0): dirty_blocks=16 [ 150.365689][ T5247] EXT4-fs (loop0): Block reservation details [ 150.371733][ T5247] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 150.407456][ T154] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 150.420546][ T5245] RBP: ffff88801c4d6828 R08: ffffffff8166aa8c R09: ffffed10171c67a8 [ 150.434576][ T154] EXT4-fs (loop0): This should not happen!! Data will be lost [ 150.434576][ T154] [ 150.446175][ T5245] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc9000142a038 [ 150.473133][ T5245] R13: ffff88801c4d6800 R14: ffff888075404000 R15: dffffc0000000000 [ 150.507317][ T5245] FS: 00007fe5d41c06c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 150.568647][ T5245] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 150.585979][ T5245] CR2: 000000110c322769 CR3: 0000000060c14000 CR4: 00000000003506e0 [ 150.609507][ T5245] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 150.631142][ T5245] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 150.658198][ T5245] Call Trace: [ 150.666332][ T5245] [ 150.670841][ T5245] ? __warn+0x15b/0x300 [ 150.687828][ T5245] ? check_map_prog_compatibility+0x720/0x8c0 [ 150.708430][ T5245] ? report_bug+0x1b7/0x2e0 [ 150.714197][ T5245] ? handle_bug+0x3d/0x70 [ 150.719394][ T5245] ? exc_invalid_op+0x16/0x40 [ 150.724236][ T5245] ? asm_exc_invalid_op+0x16/0x20 [ 150.731263][ T5245] ? __wake_up_klogd+0xcc/0x100 [ 150.739138][ T5245] ? check_map_prog_compatibility+0x720/0x8c0 [ 150.747831][ T5245] ? check_map_prog_compatibility+0x720/0x8c0 [ 150.792844][ T5245] resolve_pseudo_ldimm64+0x682/0x1240 [ 150.799020][ T5245] ? check_attach_btf_id+0xf20/0xf20 [ 150.804340][ T5245] ? __mark_reg_known+0x1a0/0x1a0 [ 150.809808][ T5245] bpf_check+0x433a/0x12d40 [ 150.814368][ T5245] ? validate_chain+0x112/0x5930 [ 150.819622][ T5245] ? unwind_next_frame+0x1437/0x1fa0 [ 150.825021][ T5245] ? reacquire_held_locks+0x660/0x660 [ 150.834044][ T5245] ? reacquire_held_locks+0x660/0x660 [ 150.850301][ T5245] ? bpf_get_btf_vmlinux+0x10/0x10 [ 150.855455][ T5245] ? mark_lock+0x98/0x340 [ 150.860411][ T5245] ? __lock_acquire+0x1295/0x1ff0 [ 150.865471][ T5245] ? mark_lock+0x98/0x340 [ 150.870289][ T5245] ? __lock_acquire+0x1295/0x1ff0 [ 150.875491][ T5245] ? ktime_get_with_offset+0x101/0x320 [ 150.881540][ T5245] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 150.887633][ T5245] ? print_irqtrace_events+0x210/0x210 [ 150.893752][ T5245] ? ktime_get_with_offset+0x101/0x320 [ 150.918443][ T5245] ? seqcount_lockdep_reader_access+0x153/0x220 [ 150.924793][ T5245] ? lockdep_hardirqs_on+0x94/0x130 [ 150.938267][ T5245] ? seqcount_lockdep_reader_access+0x1d3/0x220 [ 150.945691][ T5245] ? ktime_get_real_ts64+0x460/0x460 [ 150.957327][ T5245] ? __might_fault+0xb4/0x110 [ 150.962654][ T5245] ? memset+0x1f/0x40 [ 150.966721][ T5245] ? bpf_obj_name_cpy+0x186/0x1d0 [ 150.972367][ T5245] bpf_prog_load+0x12b3/0x1b60 [ 150.977168][ T5245] ? map_freeze+0x360/0x360 [ 150.982189][ T5245] ? __might_fault+0xb8/0x110 [ 150.986910][ T5245] ? __might_fault+0xb4/0x110 [ 150.992280][ T5245] ? bpf_lsm_bpf+0x5/0x10 [ 150.996915][ T5245] ? security_bpf+0x7d/0xa0 [ 151.001817][ T5245] __sys_bpf+0x343/0x670 [ 151.006083][ T5245] ? bpf_link_show_fdinfo+0x300/0x300 [ 151.012218][ T5245] ? syscall_enter_from_user_mode+0x2e/0x240 [ 151.018220][ T5245] ? lockdep_hardirqs_on+0x94/0x130 [ 151.023849][ T5245] __x64_sys_bpf+0x78/0x90 [ 151.029523][ T5245] do_syscall_64+0x3b/0xb0 [ 151.033986][ T5245] ? clear_bhb_loop+0x15/0x70 [ 151.039134][ T5245] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 151.045051][ T5245] RIP: 0033:0x7fe5d6356d29 [ 151.049612][ T5245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.071272][ T5245] RSP: 002b:00007fe5d41c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 151.080996][ T5245] RAX: ffffffffffffffda RBX: 00007fe5d656ffa0 RCX: 00007fe5d6356d29 [ 151.089136][ T5245] RDX: 0000000000000094 RSI: 0000000020000540 RDI: 0000000000000005 [ 151.097283][ T5245] RBP: 00007fe5d63d82a0 R08: 0000000000000000 R09: 0000000000000000 [ 151.105500][ T5245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.117153][ T5245] R13: 0000000000000000 R14: 00007fe5d656ffa0 R15: 00007ffc4e3a6548 [ 151.127660][ T5245] [ 151.131043][ T5245] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 151.138344][ T5245] CPU: 1 PID: 5245 Comm: syz.3.261 Not tainted 5.15.177-syzkaller #0 [ 151.147023][ T5245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 151.157085][ T5245] Call Trace: [ 151.160361][ T5245] [ 151.163306][ T5245] dump_stack_lvl+0x1e3/0x2d0 [ 151.168006][ T5245] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 151.173660][ T5245] ? panic+0x860/0x860 [ 151.177750][ T5245] ? check_map_prog_compatibility+0x6b0/0x8c0 [ 151.183838][ T5245] ? check_map_prog_compatibility+0x6b0/0x8c0 [ 151.189931][ T5245] panic+0x318/0x860 [ 151.193840][ T5245] ? __warn+0x16a/0x300 [ 151.198004][ T5245] ? fb_is_primary_device+0xd0/0xd0 [ 151.203227][ T5245] ? check_map_prog_compatibility+0x720/0x8c0 [ 151.209320][ T5245] __warn+0x2b2/0x300 [ 151.213317][ T5245] ? check_map_prog_compatibility+0x720/0x8c0 [ 151.219385][ T5245] report_bug+0x1b7/0x2e0 [ 151.223707][ T5245] handle_bug+0x3d/0x70 [ 151.227851][ T5245] exc_invalid_op+0x16/0x40 [ 151.232349][ T5245] asm_exc_invalid_op+0x16/0x20 [ 151.237191][ T5245] RIP: 0010:check_map_prog_compatibility+0x720/0x8c0 [ 151.244385][ T5245] Code: ed e9 ec fc ff ff e8 3f b8 ee ff 31 ed e9 e0 fc ff ff e8 33 b8 ee ff c6 05 36 1f 65 0c 01 48 c7 c7 a0 3a b1 8a e8 c0 51 ba ff <0f> 0b e9 4a fb ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 4f f9 ff [ 151.263979][ T5245] RSP: 0018:ffffc900032ff348 EFLAGS: 00010246 [ 151.270045][ T5245] RAX: 923f49bfc2fa3600 RBX: 0000000000000011 RCX: 0000000000080000 [ 151.278025][ T5245] RDX: ffffc9000de99000 RSI: 0000000000003ec3 RDI: 0000000000003ec4 [ 151.286006][ T5245] RBP: ffff88801c4d6828 R08: ffffffff8166aa8c R09: ffffed10171c67a8 [ 151.293990][ T5245] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc9000142a038 [ 151.301985][ T5245] R13: ffff88801c4d6800 R14: ffff888075404000 R15: dffffc0000000000 [ 151.309979][ T5245] ? __wake_up_klogd+0xcc/0x100 [ 151.314857][ T5245] ? check_map_prog_compatibility+0x720/0x8c0 [ 151.320950][ T5245] resolve_pseudo_ldimm64+0x682/0x1240 [ 151.326450][ T5245] ? check_attach_btf_id+0xf20/0xf20 [ 151.331752][ T5245] ? __mark_reg_known+0x1a0/0x1a0 [ 151.336799][ T5245] bpf_check+0x433a/0x12d40 [ 151.341344][ T5245] ? validate_chain+0x112/0x5930 [ 151.346316][ T5245] ? unwind_next_frame+0x1437/0x1fa0 [ 151.351619][ T5245] ? reacquire_held_locks+0x660/0x660 [ 151.357018][ T5245] ? reacquire_held_locks+0x660/0x660 [ 151.362419][ T5245] ? bpf_get_btf_vmlinux+0x10/0x10 [ 151.367560][ T5245] ? mark_lock+0x98/0x340 [ 151.371921][ T5245] ? __lock_acquire+0x1295/0x1ff0 [ 151.376968][ T5245] ? mark_lock+0x98/0x340 [ 151.381321][ T5245] ? __lock_acquire+0x1295/0x1ff0 [ 151.386355][ T5245] ? ktime_get_with_offset+0x101/0x320 [ 151.391811][ T5245] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 151.397805][ T5245] ? print_irqtrace_events+0x210/0x210 [ 151.403268][ T5245] ? ktime_get_with_offset+0x101/0x320 [ 151.408738][ T5245] ? seqcount_lockdep_reader_access+0x153/0x220 [ 151.414992][ T5245] ? lockdep_hardirqs_on+0x94/0x130 [ 151.420240][ T5245] ? seqcount_lockdep_reader_access+0x1d3/0x220 [ 151.426501][ T5245] ? ktime_get_real_ts64+0x460/0x460 [ 151.431815][ T5245] ? __might_fault+0xb4/0x110 [ 151.436516][ T5245] ? memset+0x1f/0x40 [ 151.440527][ T5245] ? bpf_obj_name_cpy+0x186/0x1d0 [ 151.445581][ T5245] bpf_prog_load+0x12b3/0x1b60 [ 151.450366][ T5245] ? map_freeze+0x360/0x360 [ 151.454872][ T5245] ? __might_fault+0xb8/0x110 [ 151.459565][ T5245] ? __might_fault+0xb4/0x110 [ 151.464262][ T5245] ? bpf_lsm_bpf+0x5/0x10 [ 151.468613][ T5245] ? security_bpf+0x7d/0xa0 [ 151.473133][ T5245] __sys_bpf+0x343/0x670 [ 151.477394][ T5245] ? bpf_link_show_fdinfo+0x300/0x300 [ 151.482794][ T5245] ? syscall_enter_from_user_mode+0x2e/0x240 [ 151.488788][ T5245] ? lockdep_hardirqs_on+0x94/0x130 [ 151.494011][ T5245] __x64_sys_bpf+0x78/0x90 [ 151.498442][ T5245] do_syscall_64+0x3b/0xb0 [ 151.502868][ T5245] ? clear_bhb_loop+0x15/0x70 [ 151.507566][ T5245] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 151.513498][ T5245] RIP: 0033:0x7fe5d6356d29 [ 151.517948][ T5245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.537572][ T5245] RSP: 002b:00007fe5d41c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 151.546005][ T5245] RAX: ffffffffffffffda RBX: 00007fe5d656ffa0 RCX: 00007fe5d6356d29 [ 151.553997][ T5245] RDX: 0000000000000094 RSI: 0000000020000540 RDI: 0000000000000005 [ 151.561986][ T5245] RBP: 00007fe5d63d82a0 R08: 0000000000000000 R09: 0000000000000000 [ 151.569974][ T5245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.577961][ T5245] R13: 0000000000000000 R14: 00007fe5d656ffa0 R15: 00007ffc4e3a6548 [ 151.585965][ T5245] [ 151.589282][ T5245] Kernel Offset: disabled [ 151.601546][ T5245] Rebooting in 86400 seconds..