last executing test programs: 13.53552896s ago: executing program 3 (id=25): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6d0, &(0x7f0000001340)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) symlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 11.911628659s ago: executing program 3 (id=27): r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000140)={0x0, 0x0}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000005c0)={0x3, 0x0, [{0x2, 0x400b, 0x6, 0x87ac, 0x6, 0x2, 0x4}, {0x80000008, 0x3, 0x0, 0x3, 0x8, 0x6, 0x7ff}, {0x80000000, 0x7, 0x2, 0xdffffff9, 0x20000000, 0x9, 0x2}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11.189028485s ago: executing program 3 (id=28): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x6) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001ac0)=@newtfilter={0x64, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xc}, {0xfffb}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_ctinfo={0x30, 0x1c, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x64}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r6, {0x7, 0xfff2}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 11.188771435s ago: executing program 2 (id=29): bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="190000000400"], 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000001c0)={[{@noblock_validity}, {@jqfmt_vfsv0}]}, 0x1, 0x445, &(0x7f0000000b00)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==") r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) fcntl$setownex(r2, 0xf, 0x0) pwritev2(r4, 0x0, 0x0, 0x5405, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fchown(r5, 0xee00, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r6, &(0x7f0000000380)={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, 0x2}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add4050000000000000002117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 10.953977806s ago: executing program 3 (id=30): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0xc8, &(0x7f0000000340)=0x4000000004100004) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1a, 0xb, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r2, @ANYRESHEX=0x0], &(0x7f0000000000)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r5 = socket(0x1e, 0x4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='kmem_cache_free\x00', r3}, 0x18) fcntl$lock(r7, 0x5, &(0x7f0000000200)={0x1}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r8, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f0000003240), 0x4000000000000e4, 0xf4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 9.116780455s ago: executing program 1 (id=31): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000040), 0x12) r3 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)={[{0x2b, 'pids'}]}, 0x6) 8.461705775s ago: executing program 0 (id=32): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffff7a, 0xffffffff, 0x1f0, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x80, 0x3, {0x4}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x38, 0x1d}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6, 0x3}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x4}, {0x4, 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000240)) 8.008650177s ago: executing program 1 (id=33): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0x17) 8.008414417s ago: executing program 0 (id=34): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = getpid() process_vm_writev(r4, 0x0, 0x0, 0x0, 0x0, 0x0) 7.961172181s ago: executing program 1 (id=35): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='leases_conflict\x00', r4}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) 6.841214394s ago: executing program 2 (id=36): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x3, 0x3a) socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x4, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) execve(0x0, 0x0, &(0x7f0000000680)={[&(0x7f0000000640)='\x00']}) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500"], 0x64}}, 0x8080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a80000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002252e000180080001000000000008000200ac1e00010c000280050001000000000008"], 0xa8}}, 0x0) bind$inet(r0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r5, 0x32b, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20044010) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.787631338s ago: executing program 0 (id=37): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6d0, &(0x7f0000001340)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) symlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 6.708756986s ago: executing program 1 (id=38): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000000)={[{@auto_da_alloc}, {@minixdf}]}, 0x1, 0x569, &(0x7f0000000a00)="$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") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)="30573472b621739991c336124406e8a5c812ca847e3bf9b837c91d46ab", 0x1d, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000480)=ANY=[@ANYBLOB="4500001c00000000ac"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000000)=ANY=[], 0x361, 0x0) socket$inet6(0xa, 0x3, 0x84) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000440)=ANY=[], 0xfe37, 0x0) 6.325092161s ago: executing program 0 (id=41): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f00000008c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3445}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000180)={0x0, 0x3, 0xb4, @lang_id={0x0, 0x3, 0xc2b}}, 0x0, 0x0}, 0x0) 6.276115685s ago: executing program 1 (id=42): r0 = io_uring_setup(0x6d94, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close(0x3) 6.171552205s ago: executing program 2 (id=43): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) 5.930500467s ago: executing program 2 (id=45): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x9}, 0x94) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x2}}}}}]}}]}}, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00E\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) 5.670635511s ago: executing program 4 (id=46): sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff010000000000000000000000000001140004"], 0xe4}}, 0x4000005) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 5.479507478s ago: executing program 4 (id=47): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x81, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r5, &(0x7f0000000180), 0x4000190, 0x0) 4.349934691s ago: executing program 4 (id=48): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 4.241638752s ago: executing program 3 (id=49): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@getqdisc={0x24, 0x26, 0x5, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0xc}, {0x5, 0x5}, {0x3, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008080}, 0x24000000) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x0, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x20}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x5a}, 0x28) r6 = io_uring_setup(0x1ad2, &(0x7f0000000740)={0x0, 0x1100, 0x0, 0xfffffffe, 0x3d0}) close(r6) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 4.099409164s ago: executing program 4 (id=50): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x102, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000580)={0x2, [], 0x3, "3f26d406b04d0e"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x800000002400}, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000200)={0x18, 0x2, {0xfeff, @local}}, 0x1e) connect$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0xffff, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r3}, 0x10) setresuid(0xee01, 0xee00, 0x0) writev(r2, &(0x7f0000000a40)=[{&(0x7f0000000640)="5e1d", 0x2}], 0x1) 2.674298635s ago: executing program 2 (id=51): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6d0, &(0x7f0000001340)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) symlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.981325419s ago: executing program 0 (id=52): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000000)={[{@auto_da_alloc}, {@minixdf}]}, 0x1, 0x569, &(0x7f0000000a00)="$eJzs3d1rm9UfAPDvkzZ7//3WwRgqIgUvnMyla+vLBC/mtQ4Gej9D+6yMpsto0rHWgduFu5bhnQPxXrz2UvwHvPBvGOhgyCiCeBN50idZ2iZtuqUvms8HnnK+z0vPOXlyTs7JSUgAQ2s8+1OIeDkivkoiTkZEkh8bjfzg+Np5q0/vzGRbEo3GJ38kzfOyuPW/Wtcdz4OXIuLnLyPOFTbnW1temS9XKuliHk/UF25O1JZXzl9fKM+lc+mNqenpi+9MT73/3rsDq+ubV7KCjOTRqQdJXIoTedRZjxdwtzMYj/H8MSnGpQ0nTg4gs4Mk6br3hz0vBzszkrfzYmR9wMkYyVs98N/3RUQ0gCGV7Lj9/1rcnZIAe6s1DmjN7Qc0D/7XePLh2gRoc/1H194biSPNudGx1WTdzCib744NIP8sjx9/f/gg22Jw70MAbOvuvYi4MDq6uf9L8v7v+V3o45yNeej/YO/8lI1/3uo2/im0xz/RZfxzvEvbfR7bt//C4wFk01M2/vug6/i3vWg1NpJH/2uO+YrJteuVNOvb/h8RZ6N4OIu3Ws+5uPqo0etY5/gv27L8W2PBvByPRw+vv2a2XC+/SJ07PbkX8UrX8W/Svv/J2v1ft8STPR5X+szjTPrwtV7Htq//7mp8F/FG1/v/rLrJ1uuTE83nw0TrWbHZn/fP/NIr//2uf3b/j21d/7Gkc722tvM8vj3ydxrt9eT11tU/+n/+H0o+baYP5ftul+v1xcmIQ8nH7f2F1v6pZ9e24tb5Wf3Pvr51/5d06f+ORsRnfdb//unvX+117CDc/9mu9789u91w/3eeePTR59/0yr+//u/tZupsvqef/q/fAr7IYwcAAAAAAAAHTSEiTkRSKLXThUKptPb5jtNxrFCp1urnrlWXbsxG87uyY1EstFa6T3Z8HmIyXzFsxVMb4umIOBURX48cbcalmWpldr8rDwAAAAAAAAAAAAAAAAAAAAfE8R7f/8/8NrLfpQN2nZ/8huG1bfsfxC89AQeS138YXto/DK++2n9x98sB7D2v/zC8tH8YXto/DC/tH4aX9g8AAAAAAAAAAAAAAAAAAAAAAAAAAAADdeXy5WxrrD69M5PFs7eWl+art87PprX50sLSTGmmunizNFetzlXS0kx1Ybv/V6lWb05OxdLtiXpaq0/UlleuLlSXbtSvXl8oz6VXU78iBgAAAAAAAAAAAAAAAAAAAJvVllfmy5VKuigxxIm/Go3G814+ut+Fl9iVxH73TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwzD8BAAD//1hdMq0=") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)="30573472b621739991c336124406e8a5c812ca847e3bf9b837c91d46ab", 0x1d, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000480)=ANY=[@ANYBLOB="4500001c00000000ac"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000000)=ANY=[], 0x361, 0x0) socket$inet6(0xa, 0x3, 0x84) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000440)=ANY=[], 0xfe37, 0x0) 978.12246ms ago: executing program 2 (id=53): prlimit64(0x0, 0xe, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x32) 778.748729ms ago: executing program 1 (id=54): prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x208041, &(0x7f0000000140)=ANY=[], 0x2, 0x238, &(0x7f0000000240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x20) openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x2, 0x0) fadvise64(r0, 0xfcff, 0x20000, 0x3) 777.471979ms ago: executing program 0 (id=55): write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1181}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x3c}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) close(0x3) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x64, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0xb, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR='/', @TCF_META_TYPE_VAR]}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 319.615561ms ago: executing program 4 (id=56): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000580)='kfree\x00', r2}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r4}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 116.499759ms ago: executing program 3 (id=57): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r4, 0x24, &(0x7f0000000000)) 0s ago: executing program 4 (id=58): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) ioctl$USBDEVFS_BULK(r2, 0x5523, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.37' (ED25519) to the list of known hosts. [ 51.383589][ T4171] cgroup: Unknown subsys name 'net' [ 51.555476][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 53.062957][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 54.557742][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 54.620748][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 54.699902][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 54.712948][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 54.767478][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.775512][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.784585][ T4187] device bridge_slave_0 entered promiscuous mode [ 54.803949][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.811217][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.819810][ T4191] device bridge_slave_0 entered promiscuous mode [ 54.829013][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 54.848396][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.856564][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.865621][ T4187] device bridge_slave_1 entered promiscuous mode [ 54.874394][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.882013][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.890698][ T4191] device bridge_slave_1 entered promiscuous mode [ 54.980667][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.991842][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.010916][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.018180][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.026088][ T4181] device bridge_slave_0 entered promiscuous mode [ 55.036312][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.047534][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.075931][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.084006][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.092373][ T4181] device bridge_slave_1 entered promiscuous mode [ 55.123193][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.130409][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.138345][ T4182] device bridge_slave_0 entered promiscuous mode [ 55.163632][ T4191] team0: Port device team_slave_0 added [ 55.172592][ T4191] team0: Port device team_slave_1 added [ 55.184173][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.191921][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.201242][ T4182] device bridge_slave_1 entered promiscuous mode [ 55.217599][ T4187] team0: Port device team_slave_0 added [ 55.232176][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.239541][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.247235][ T4194] device bridge_slave_0 entered promiscuous mode [ 55.263881][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.274643][ T4187] team0: Port device team_slave_1 added [ 55.295448][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.303147][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.311273][ T4194] device bridge_slave_1 entered promiscuous mode [ 55.320532][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.350945][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.358468][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.386035][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.408096][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.433065][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.440422][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.467466][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.479793][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.487025][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.513184][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.525790][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.538954][ T4181] team0: Port device team_slave_0 added [ 55.546684][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.563641][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.571286][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.598238][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.624874][ T4181] team0: Port device team_slave_1 added [ 55.640426][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.698221][ T4187] device hsr_slave_0 entered promiscuous mode [ 55.705714][ T4187] device hsr_slave_1 entered promiscuous mode [ 55.720495][ T4182] team0: Port device team_slave_0 added [ 55.727091][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.734774][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.762002][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.790140][ T4194] team0: Port device team_slave_0 added [ 55.798805][ T4182] team0: Port device team_slave_1 added [ 55.814424][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.821596][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.848851][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.864028][ T4191] device hsr_slave_0 entered promiscuous mode [ 55.870991][ T4191] device hsr_slave_1 entered promiscuous mode [ 55.877885][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.888283][ T4191] Cannot create hsr debugfs directory [ 55.895576][ T4194] team0: Port device team_slave_1 added [ 55.916964][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.924206][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.952265][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.988392][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.995520][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.023442][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.074227][ T4181] device hsr_slave_0 entered promiscuous mode [ 56.081625][ T4181] device hsr_slave_1 entered promiscuous mode [ 56.088102][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.096002][ T4181] Cannot create hsr debugfs directory [ 56.102099][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.109407][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.136814][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.152148][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.159328][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.186119][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.189960][ T4192] Bluetooth: hci1: command 0x0409 tx timeout [ 56.196752][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 56.269295][ T4192] Bluetooth: hci2: command 0x0409 tx timeout [ 56.279535][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 56.285784][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 56.294974][ T4194] device hsr_slave_0 entered promiscuous mode [ 56.301769][ T4194] device hsr_slave_1 entered promiscuous mode [ 56.308772][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.316814][ T4194] Cannot create hsr debugfs directory [ 56.343872][ T4182] device hsr_slave_0 entered promiscuous mode [ 56.351280][ T4182] device hsr_slave_1 entered promiscuous mode [ 56.358300][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.366472][ T4182] Cannot create hsr debugfs directory [ 56.628448][ T4181] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.643488][ T4181] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.653734][ T4181] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.663887][ T4181] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.693802][ T4187] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.705383][ T4187] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.714919][ T4187] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.728347][ T4187] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.798128][ T4194] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.821532][ T4194] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.835885][ T4194] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.847594][ T4194] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.900560][ T4182] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.937575][ T4182] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.965238][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.981051][ T4182] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.991875][ T4182] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.024259][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.048030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.057847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.066912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.076126][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.086859][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.102934][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.124963][ T4191] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.134231][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.143319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.154261][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.161568][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.171649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.181384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.192999][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.200365][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.208204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.217217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.230883][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.241012][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.250621][ T3069] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.258117][ T3069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.270482][ T4191] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.283449][ T4191] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.293139][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.305983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.323259][ T4191] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.347539][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.358873][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.369536][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.378209][ T3069] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.385335][ T3069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.394676][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.404636][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.426600][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.435676][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.445080][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.455405][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.476450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.487008][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.495401][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.513533][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.528784][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.539014][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.547923][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.559755][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.568222][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.576974][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.585765][ T3069] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.592852][ T3069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.600728][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.609718][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.618444][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.627197][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.636305][ T3069] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.643450][ T3069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.652794][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.661302][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.671954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.681965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.703518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.712984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.734321][ T4181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.747851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.764758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.816342][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.827839][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.841742][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.853240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.864324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.874091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.886135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.895571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.904854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.914991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.924133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.933651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.942948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.953727][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.979421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.987825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.996463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.005091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.015644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.029351][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.043450][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.078532][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.096084][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.107847][ T1277] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.115380][ T1277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.131171][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.144420][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.156091][ T1277] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.163448][ T1277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.172015][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.205363][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.217891][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.236209][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.254096][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.269592][ T4243] Bluetooth: hci0: command 0x041b tx timeout [ 58.289878][ T4243] Bluetooth: hci1: command 0x041b tx timeout [ 58.304309][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.317776][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.328187][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.338881][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.348216][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.357010][ T4236] Bluetooth: hci3: command 0x041b tx timeout [ 58.361682][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.363425][ T4236] Bluetooth: hci4: command 0x041b tx timeout [ 58.377767][ T4236] Bluetooth: hci2: command 0x041b tx timeout [ 58.382552][ T4181] device veth0_vlan entered promiscuous mode [ 58.404203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.412972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.423281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.434738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.452157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.461499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.469711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.478021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.486007][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.495375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.511402][ T4181] device veth1_vlan entered promiscuous mode [ 58.525497][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.538769][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.547175][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.556885][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.565052][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.573059][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.581086][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.600585][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.610889][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.642406][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.654968][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.668534][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.687598][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.695213][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.712357][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.725362][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.734638][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.741956][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.754650][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.784286][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.797172][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.832968][ T4181] device veth0_macvtap entered promiscuous mode [ 58.852061][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.870082][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.879000][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.896200][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.905237][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.915771][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.925268][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.934134][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.942914][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.951600][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.961936][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.970945][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.983094][ T4181] device veth1_macvtap entered promiscuous mode [ 59.018064][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.027790][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.045086][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.066046][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.078416][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.100458][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.108060][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.116750][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.125924][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.139636][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.157458][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.178002][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.187882][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.206435][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.217326][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.227774][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.238306][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.247805][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.255822][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.269368][ T4187] device veth0_vlan entered promiscuous mode [ 59.278765][ T4181] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.290249][ T4181] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.299620][ T4181] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.310381][ T4181] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.327115][ T4194] device veth0_vlan entered promiscuous mode [ 59.355859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.368539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.378831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.387835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.398589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.407114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.415574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.424117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.432772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.442487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.458436][ T4187] device veth1_vlan entered promiscuous mode [ 59.472940][ T4182] device veth0_vlan entered promiscuous mode [ 59.503275][ T4194] device veth1_vlan entered promiscuous mode [ 59.514244][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.523706][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.532264][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.540920][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.554140][ T4182] device veth1_vlan entered promiscuous mode [ 59.593797][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.684049][ T4194] device veth0_macvtap entered promiscuous mode [ 59.693376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.703470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.713135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.722073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.730943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.740054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.748629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.759531][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.768263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.778156][ T4187] device veth0_macvtap entered promiscuous mode [ 59.800439][ T4194] device veth1_macvtap entered promiscuous mode [ 59.813434][ T4182] device veth0_macvtap entered promiscuous mode [ 59.821893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.832128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.842231][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.851624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.861454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.871798][ T4187] device veth1_macvtap entered promiscuous mode [ 59.886141][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.898512][ T4182] device veth1_macvtap entered promiscuous mode [ 59.908914][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.946364][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.954942][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.967756][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.982763][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.986193][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.997503][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.009005][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.021321][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.032895][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.044952][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.055823][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.064385][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.073161][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.082169][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.091857][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.100801][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.109728][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.118425][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.127233][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.142470][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.151367][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.171445][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.182956][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.197393][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.209920][ T4191] device veth0_vlan entered promiscuous mode [ 60.218254][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.229240][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.239928][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.251038][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.262736][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.285190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.299600][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.308503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.319328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.331701][ T4182] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.343508][ T4182] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.352834][ T4236] Bluetooth: hci1: command 0x040f tx timeout [ 60.353327][ T4236] Bluetooth: hci0: command 0x040f tx timeout [ 60.374576][ T4182] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.384265][ T4182] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.401243][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.412433][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.423351][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.435499][ T4236] Bluetooth: hci2: command 0x040f tx timeout [ 60.435749][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.447643][ T4236] Bluetooth: hci4: command 0x040f tx timeout [ 60.451753][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.451771][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.453134][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.468825][ T4236] Bluetooth: hci3: command 0x040f tx timeout [ 60.496166][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.507198][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.518461][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.529832][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.539973][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.552410][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.585077][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.604071][ T4194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.613499][ T4194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.622465][ T4194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.631418][ T4194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.646126][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.661284][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.671461][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.680876][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.696198][ T4187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.705718][ T4187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.715577][ T4187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.724852][ T4187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.746122][ T4191] device veth1_vlan entered promiscuous mode [ 60.790428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.798877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.876770][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.886368][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.898786][ T4191] device veth0_macvtap entered promiscuous mode [ 60.946758][ T4191] device veth1_macvtap entered promiscuous mode [ 60.971386][ T3069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.979674][ T4251] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 60.982624][ T3069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.006864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.017579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.026717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.064578][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.068956][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.080808][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.091839][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.102418][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.113428][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.123965][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.134990][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.145490][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.156773][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.169009][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.180274][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.195250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.205564][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.210220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.222250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.232113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.240673][ T4251] usb 2-1: Using ep0 maxpacket: 16 [ 61.248111][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.258743][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.269837][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.280627][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.290804][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.302478][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.314151][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.325012][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.337002][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.366432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.375771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.388240][ T4191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.399675][ T4251] usb 2-1: config 1 has an invalid interface number: 214 but max is 0 [ 61.403351][ T4191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.408684][ T4251] usb 2-1: config 1 has no interface number 0 [ 61.418847][ T4191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.433687][ T4251] usb 2-1: config 1 interface 214 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 61.439746][ T4191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.444202][ T4251] usb 2-1: config 1 interface 214 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 61.463115][ T4251] usb 2-1: config 1 interface 214 has no altsetting 0 [ 61.466007][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.498528][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.525947][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.541700][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.560549][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.596487][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.634874][ T3069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.649905][ T4251] usb 2-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 61.663024][ T3069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.671299][ T4251] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.691857][ T4251] usb 2-1: Product: syz [ 61.696436][ T4251] usb 2-1: Manufacturer: syz [ 61.708628][ T4251] usb 2-1: SerialNumber: syz [ 61.732895][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.760799][ T4288] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 61.768738][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.810284][ T4288] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 61.817772][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.857344][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.931678][ T4251] ums-alauda 2-1:1.214: USB Mass Storage device detected [ 61.942510][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.956412][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.955226][ T4236] Bluetooth: hci0: command 0x0419 tx timeout [ 63.200536][ T4236] Bluetooth: hci1: command 0x0419 tx timeout [ 63.211995][ T4236] Bluetooth: hci3: command 0x0419 tx timeout [ 63.218141][ T4236] Bluetooth: hci4: command 0x0419 tx timeout [ 63.224714][ T4236] Bluetooth: hci2: command 0x0419 tx timeout [ 63.226079][ T4251] scsi host1: usb-storage 2-1:1.214 [ 63.243758][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.252860][ T4299] loop2: detected capacity change from 0 to 1024 [ 63.272704][ T4251] usb 2-1: USB disconnect, device number 2 [ 63.341759][ T4304] loop4: detected capacity change from 0 to 256 [ 63.370533][ T4299] ======================================================= [ 63.370533][ T4299] WARNING: The mand mount option has been deprecated and [ 63.370533][ T4299] and is ignored by this kernel. Remove the mand [ 63.370533][ T4299] option from the mount to silence this warning. [ 63.370533][ T4299] ======================================================= [ 63.542954][ T4299] EXT4-fs (loop2): mounted filesystem without journal. Opts: auto_da_alloc,minixdf,,errors=continue. Quota mode: none. [ 63.943679][ T4316] loop4: detected capacity change from 0 to 1024 [ 64.137415][ T4319] syz.3.7[4319] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.137927][ T4319] syz.3.7[4319] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 65.435993][ T4316] hfsplus: xattr search failed [ 65.659045][ C0] sched: RT throttling activated [ 66.706543][ T4338] loop1: detected capacity change from 0 to 1024 [ 67.070962][ T4349] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 67.101913][ T4350] bridge0: port 3(syz_tun) entered blocking state [ 67.114693][ T4338] EXT4-fs (loop1): Test dummy encryption mode enabled [ 67.119312][ T4350] bridge0: port 3(syz_tun) entered disabled state [ 67.128026][ T4338] EXT4-fs (loop1): inline encryption not supported [ 67.167779][ T4338] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 67.256661][ T4350] device syz_tun entered promiscuous mode [ 67.291967][ T4350] bridge0: port 3(syz_tun) entered blocking state [ 67.299223][ T4350] bridge0: port 3(syz_tun) entered forwarding state [ 69.578788][ T4343] loop3: detected capacity change from 0 to 40427 [ 69.621730][ T4343] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x1ffff [ 69.729141][ T4285] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 69.737413][ T4343] F2FS-fs (loop3): invalid crc value [ 69.781987][ T4343] F2FS-fs (loop3): Found nat_bits in checkpoint [ 69.962938][ T4382] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 69.995358][ T4285] usb 1-1: Using ep0 maxpacket: 16 [ 70.140179][ T4285] usb 1-1: config 1 has an invalid interface number: 214 but max is 0 [ 70.163699][ T4285] usb 1-1: config 1 has no interface number 0 [ 70.173849][ T4285] usb 1-1: config 1 interface 214 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 70.219266][ T4285] usb 1-1: config 1 interface 214 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 70.249194][ T4285] usb 1-1: config 1 interface 214 has no altsetting 0 [ 70.459512][ T4285] usb 1-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 70.479498][ T4285] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.487622][ T4285] usb 1-1: Product: syz [ 70.489721][ T4389] loop3: detected capacity change from 0 to 1024 [ 70.500443][ T4285] usb 1-1: Manufacturer: syz [ 70.563487][ T4390] syz.1.26[4390] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.563983][ T4390] syz.1.26[4390] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.556462][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.585051][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.659114][ T4285] usb 1-1: SerialNumber: syz [ 71.679457][ T4371] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 71.686907][ T4371] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 71.725290][ T9] hfsplus: b-tree write err: -5, ino 3 [ 72.674045][ T4285] ums-alauda 1-1:1.214: USB Mass Storage device detected [ 73.134587][ T4407] loop2: detected capacity change from 0 to 512 [ 74.181659][ T4413] tipc: Started in network mode [ 74.186943][ T4413] tipc: Node identity 4, cluster identity 4711 [ 74.193339][ T4413] tipc: Node number set to 4 [ 74.619691][ T4407] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 74.633384][ T4407] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 74.680069][ T4285] scsi host1: usb-storage 1-1:1.214 [ 74.767610][ T4407] EXT4-fs (loop2): 1 truncate cleaned up [ 74.773834][ T4407] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,jqfmt=vfsv0,,errors=continue. Quota mode: none. [ 75.664773][ T4285] usb 1-1: USB disconnect, device number 2 [ 76.938852][ T4434] loop0: detected capacity change from 0 to 1024 [ 77.060162][ T4441] loop1: detected capacity change from 0 to 1024 [ 77.087660][ T4442] loop2: detected capacity change from 0 to 128 [ 77.196890][ T4442] netlink: 44 bytes leftover after parsing attributes in process `syz.2.36'. [ 77.233340][ T4441] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc,minixdf,,errors=continue. Quota mode: none. [ 77.255625][ T4437] netlink: 68 bytes leftover after parsing attributes in process `syz.2.36'. [ 77.327912][ T4394] hfsplus: b-tree write err: -5, ino 3 [ 77.909112][ T4412] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 78.052750][ T4463] netlink: 128 bytes leftover after parsing attributes in process `syz.4.46'. [ 78.103995][ T4222] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 78.430480][ T4412] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.457177][ T4412] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.747458][ T4412] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 78.882424][ T4412] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.110670][ T4412] usb 1-1: config 0 descriptor?? [ 79.195242][ T4222] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 79.225607][ T4222] usb 3-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 79.239130][ T4222] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.310694][ T4222] usb 3-1: config 0 descriptor?? [ 79.378180][ T4469] syz.4.48[4469] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.378333][ T4469] syz.4.48[4469] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.594412][ T4474] loop3: detected capacity change from 0 to 512 [ 79.986354][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 80.083255][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 80.102123][ T26] audit: type=1326 audit(1767265613.758:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4475 comm="syz.4.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ef7c03749 code=0x7ffc0000 [ 80.200287][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 80.295611][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 80.333411][ T26] audit: type=1326 audit(1767265613.798:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4475 comm="syz.4.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4ef7c03749 code=0x7ffc0000 [ 80.411141][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 80.476134][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 80.538105][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 80.580625][ T26] audit: type=1326 audit(1767265613.818:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4475 comm="syz.4.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ef7c03749 code=0x7ffc0000 [ 80.636001][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 80.726016][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 80.854675][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 80.980911][ T26] audit: type=1326 audit(1767265613.828:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4475 comm="syz.4.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f4ef7c03749 code=0x7ffc0000 [ 81.091729][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 81.271633][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 81.441637][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 81.546087][ T26] audit: type=1326 audit(1767265613.838:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4475 comm="syz.4.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ef7c03749 code=0x7ffc0000 [ 81.586758][ T7] cfg80211: failed to load regulatory.db [ 81.670797][ T26] audit: type=1326 audit(1767265613.838:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4475 comm="syz.4.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f4ef7c03749 code=0x7ffc0000 [ 81.682471][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 81.778547][ T26] audit: type=1326 audit(1767265613.848:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4475 comm="syz.4.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ef7c03749 code=0x7ffc0000 [ 82.136555][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 82.297742][ T4482] loop2: detected capacity change from 0 to 1024 [ 82.308651][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 82.355155][ T26] audit: type=1326 audit(1767265613.858:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4475 comm="syz.4.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4ef7c03749 code=0x7ffc0000 [ 82.438239][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 82.481380][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 82.489851][ T4412] uclogic 0003:256C:006D.0002: failed retrieving string descriptor #200: -71 [ 82.498781][ T4412] uclogic 0003:256C:006D.0002: failed retrieving pen parameters: -71 [ 82.517505][ T4484] loop0: detected capacity change from 0 to 1024 [ 82.521307][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 82.530217][ T4412] uclogic 0003:256C:006D.0002: failed probing pen v2 parameters: -71 [ 82.539549][ T4412] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 82.547050][ T4412] uclogic: probe of 0003:256C:006D.0002 failed with error -71 [ 82.558811][ T4412] usb 1-1: USB disconnect, device number 3 [ 82.581946][ T26] audit: type=1326 audit(1767265613.888:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4475 comm="syz.4.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ef7c03749 code=0x7ffc0000 [ 82.625246][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 82.655856][ T4484] EXT4-fs (loop0): mounted filesystem without journal. Opts: auto_da_alloc,minixdf,,errors=continue. Quota mode: none. [ 82.660303][ T26] audit: type=1326 audit(1767265613.898:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4475 comm="syz.4.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4ef7c03749 code=0x7ffc0000 [ 82.679368][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 82.699808][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 82.709126][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 82.717006][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 82.724952][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 82.731998][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 82.738979][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 82.746093][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 82.753411][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 82.760515][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 82.767675][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 82.774903][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 82.782054][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 82.789423][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 82.796581][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 82.803636][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 82.819566][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 82.826668][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 82.846666][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 82.858210][ T4489] loop1: detected capacity change from 0 to 16 [ 82.869463][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 82.876758][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 82.884555][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 82.891686][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 82.898671][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 82.906606][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 82.913896][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 82.922159][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 82.933310][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 82.939176][ T4489] erofs: (device loop1): mounted with root inode @ nid 36. [ 82.941962][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 82.956834][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 82.965191][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 82.972602][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 82.979960][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 82.987162][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 82.997134][ T4489] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 83.014831][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 83.015540][ T4489] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -36 in[64, 4032] out[1851] [ 83.023099][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 83.053807][ T4489] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 83.057853][ T4490] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 83.071901][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 83.073853][ T4490] erofs: (device loop1): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 83.078881][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 83.078908][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 83.093752][ T4490] erofs: (device loop1): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 83.095358][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 83.102505][ T4490] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 83.117873][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 83.125154][ T4490] erofs: (device loop1): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 83.129186][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 83.135990][ T4490] erofs: (device loop1): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 83.144671][ T4222] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 83.154351][ T4490] erofs: (device loop1): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 83.161192][ T4222] elecom 0003:056E:00E6.0001: item fetching failed at offset 66/69 [ 83.175151][ T4490] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 83.179266][ T4222] elecom: probe of 0003:056E:00E6.0001 failed with error -22 [ 83.186655][ T4490] erofs: (device loop1): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 83.205603][ T4222] usb 3-1: USB disconnect, device number 2 [ 83.221700][ T4490] erofs: (device loop1): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 83.282461][ T4490] erofs: (device loop1): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 83.291171][ T1277] hfsplus: b-tree write err: -5, ino 3 [ 83.308479][ T4490] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 106495 of nid 36 [ 83.324113][ T4474] EXT4-fs: failed to create workqueue [ 83.330577][ T4474] EXT4-fs (loop3): mount failed [ 83.335589][ T4490] erofs: (device loop1): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 83.354472][ T4490] erofs: (device loop1): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 83.378524][ T4490] erofs: (device loop1): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36 [ 83.388376][ T4490] erofs: (device loop1): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 83.460817][ T4493] netlink: 96 bytes leftover after parsing attributes in process `syz.4.56'. [ 83.484105][ T4490] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36 [ 83.523530][ T4490] erofs: (device loop1): z_erofs_readahead: readahead error at page 15 @ nid 36 [ 83.543790][ T4490] attempt to access beyond end of device [ 83.543790][ T4490] loop1: rw=524288, want=848, limit=16 [ 83.566235][ T4490] attempt to access beyond end of device [ 83.566235][ T4490] loop1: rw=524288, want=13478624104, limit=16 [ 83.620481][ T4490] attempt to access beyond end of device [ 83.620481][ T4490] loop1: rw=524288, want=13478624080, limit=16 [ 83.659535][ T4490] erofs: (device loop1): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 83.981927][ T4490] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 84.687422][ T4490] erofs: (device loop1): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 84.760642][ T4490] attempt to access beyond end of device [ 84.760642][ T4490] loop1: rw=524288, want=32, limit=16 [ 84.803225][ T4490] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -36 in[64, 4032] out[3537] [ 84.816683][ T4490] ================================================================== [ 84.825285][ T4490] BUG: KASAN: vmalloc-out-of-bounds in hex_dump_to_buffer+0x3c0/0xd50 [ 84.833746][ T4490] Read of size 1 at addr ffffc9000118c000 by task syz.1.54/4490 [ 84.841385][ T4490] [ 84.843710][ T4490] CPU: 0 PID: 4490 Comm: syz.1.54 Not tainted syzkaller #0 [ 84.851187][ T4490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 84.861369][ T4490] Call Trace: [ 84.864650][ T4490] [ 84.867581][ T4490] dump_stack_lvl+0x168/0x230 [ 84.872272][ T4490] ? show_regs_print_info+0x20/0x20 [ 84.877473][ T4490] ? _printk+0xcc/0x110 [ 84.881629][ T4490] ? hex_dump_to_buffer+0x3c0/0xd50 [ 84.886933][ T4490] ? load_image+0x3b0/0x3b0 [ 84.891612][ T4490] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 84.897098][ T4490] print_address_description+0x60/0x2d0 [ 84.902648][ T4490] ? hex_dump_to_buffer+0x3c0/0xd50 [ 84.907935][ T4490] kasan_report+0xdf/0x130 [ 84.912444][ T4490] ? hex_dump_to_buffer+0x3c0/0xd50 [ 84.917742][ T4490] hex_dump_to_buffer+0x3c0/0xd50 [ 84.922775][ T4490] print_hex_dump+0x136/0x260 [ 84.927457][ T4490] ? hex_dump_to_buffer+0xd50/0xd50 [ 84.932764][ T4490] z_erofs_lz4_decompress+0xc7f/0x1180 [ 84.938245][ T4490] z_erofs_decompress+0x767/0xde0 [ 84.943274][ T4490] ? lock_chain_count+0x20/0x20 [ 84.948213][ T4490] ? z_erofs_put_shortlivedpage+0x16a/0x3c0 [ 84.954196][ T4490] z_erofs_decompress_queue+0x11a6/0x1990 [ 84.959957][ T4490] ? z_erofs_pagevec_ctor_init+0x670/0x670 [ 84.966171][ T4490] ? z_erofs_decompress_kickoff+0x2b9/0x2e0 [ 84.972090][ T4490] ? submit_bio+0x2be/0x560 [ 84.976704][ T4490] ? submit_bio_noacct+0x6d0/0x6d0 [ 84.982093][ T4490] ? bio_add_page+0x2d6/0x460 [ 84.986785][ T4490] z_erofs_runqueue+0x164c/0x1890 [ 84.991932][ T4490] ? z_erofs_do_read_page+0x26c0/0x26c0 [ 84.997501][ T4490] ? mutex_unlock+0x10/0x10 [ 85.002033][ T4490] z_erofs_readahead+0xb81/0x10c0 [ 85.007252][ T4490] ? z_erofs_readpage+0x6c0/0x6c0 [ 85.012411][ T4490] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 85.018324][ T4490] ? local_lock_release+0x97/0x170 [ 85.023709][ T4490] read_pages+0x165/0x920 [ 85.028068][ T4490] ? page_cache_ra_unbounded+0x930/0x930 [ 85.034002][ T4490] ? add_to_page_cache_lru+0x2a8/0x4a0 [ 85.039563][ T4490] page_cache_ra_unbounded+0x830/0x930 [ 85.045308][ T4490] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 85.051821][ T4490] force_page_cache_ra+0x3e5/0x440 [ 85.057120][ T4490] generic_fadvise+0x520/0x7d0 [ 85.062112][ T4490] ? dump_task+0x600/0x600 [ 85.066642][ T4490] ? __fdget+0x18b/0x210 [ 85.071263][ T4490] __x64_sys_fadvise64+0x139/0x180 [ 85.076390][ T4490] do_syscall_64+0x4c/0xa0 [ 85.080808][ T4490] ? clear_bhb_loop+0x30/0x80 [ 85.085501][ T4490] ? clear_bhb_loop+0x30/0x80 [ 85.090278][ T4490] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.096169][ T4490] RIP: 0033:0x7fea56df3749 [ 85.100692][ T4490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.120397][ T4490] RSP: 002b:00007fea55039038 EFLAGS: 00000246 ORIG_RAX: 00000000000000dd [ 85.128813][ T4490] RAX: ffffffffffffffda RBX: 00007fea5704a090 RCX: 00007fea56df3749 [ 85.136795][ T4490] RDX: 0000000000020000 RSI: 000000000000fcff RDI: 0000000000000004 [ 85.144874][ T4490] RBP: 00007fea56e77f91 R08: 0000000000000000 R09: 0000000000000000 [ 85.153374][ T4490] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 85.161540][ T4490] R13: 00007fea5704a128 R14: 00007fea5704a090 R15: 00007ffefacfb298 [ 85.169971][ T4490] [ 85.172998][ T4490] [ 85.175342][ T4490] [ 85.177661][ T4490] Memory state around the buggy address: [ 85.183385][ T4490] ffffc9000118bf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 85.191627][ T4490] ffffc9000118bf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 85.199689][ T4490] >ffffc9000118c000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 85.207742][ T4490] ^ [ 85.211801][ T4490] ffffc9000118c080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 85.219870][ T4490] ffffc9000118c100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 85.228024][ T4490] ================================================================== [ 85.236096][ T4490] Disabling lock debugging due to kernel taint [ 85.244171][ T4490] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 85.251498][ T4490] CPU: 0 PID: 4490 Comm: syz.1.54 Tainted: G B syzkaller #0 [ 85.260110][ T4490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 85.270187][ T4490] Call Trace: [ 85.273493][ T4490] [ 85.276440][ T4490] dump_stack_lvl+0x168/0x230 [ 85.281143][ T4490] ? show_regs_print_info+0x20/0x20 [ 85.286450][ T4490] ? load_image+0x3b0/0x3b0 [ 85.290981][ T4490] panic+0x2c9/0x7f0 [ 85.294905][ T4490] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 85.301173][ T4490] ? bpf_jit_dump+0xd0/0xd0 [ 85.305731][ T4490] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 85.311650][ T4490] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 85.317773][ T4490] ? _raw_spin_unlock+0x40/0x40 [ 85.322830][ T4490] ? hex_dump_to_buffer+0x3c0/0xd50 [ 85.328161][ T4490] check_panic_on_warn+0x80/0xa0 [ 85.333314][ T4490] ? hex_dump_to_buffer+0x3c0/0xd50 [ 85.338538][ T4490] end_report+0x6d/0xf0 [ 85.342801][ T4490] kasan_report+0x102/0x130 [ 85.347435][ T4490] ? hex_dump_to_buffer+0x3c0/0xd50 [ 85.352657][ T4490] hex_dump_to_buffer+0x3c0/0xd50 [ 85.357720][ T4490] print_hex_dump+0x136/0x260 [ 85.362421][ T4490] ? hex_dump_to_buffer+0xd50/0xd50 [ 85.367653][ T4490] z_erofs_lz4_decompress+0xc7f/0x1180 [ 85.373264][ T4490] z_erofs_decompress+0x767/0xde0 [ 85.378403][ T4490] ? lock_chain_count+0x20/0x20 [ 85.383454][ T4490] ? z_erofs_put_shortlivedpage+0x16a/0x3c0 [ 85.389490][ T4490] z_erofs_decompress_queue+0x11a6/0x1990 [ 85.395260][ T4490] ? z_erofs_pagevec_ctor_init+0x670/0x670 [ 85.401351][ T4490] ? z_erofs_decompress_kickoff+0x2b9/0x2e0 [ 85.407445][ T4490] ? submit_bio+0x2be/0x560 [ 85.412118][ T4490] ? submit_bio_noacct+0x6d0/0x6d0 [ 85.417441][ T4490] ? bio_add_page+0x2d6/0x460 [ 85.422139][ T4490] z_erofs_runqueue+0x164c/0x1890 [ 85.427256][ T4490] ? z_erofs_do_read_page+0x26c0/0x26c0 [ 85.432839][ T4490] ? mutex_unlock+0x10/0x10 [ 85.437653][ T4490] z_erofs_readahead+0xb81/0x10c0 [ 85.442787][ T4490] ? z_erofs_readpage+0x6c0/0x6c0 [ 85.447845][ T4490] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 85.453854][ T4490] ? local_lock_release+0x97/0x170 [ 85.459170][ T4490] read_pages+0x165/0x920 [ 85.463567][ T4490] ? page_cache_ra_unbounded+0x930/0x930 [ 85.469230][ T4490] ? add_to_page_cache_lru+0x2a8/0x4a0 [ 85.474805][ T4490] page_cache_ra_unbounded+0x830/0x930 [ 85.480383][ T4490] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 85.486999][ T4490] force_page_cache_ra+0x3e5/0x440 [ 85.492149][ T4490] generic_fadvise+0x520/0x7d0 [ 85.496934][ T4490] ? dump_task+0x600/0x600 [ 85.501640][ T4490] ? __fdget+0x18b/0x210 [ 85.505904][ T4490] __x64_sys_fadvise64+0x139/0x180 [ 85.511036][ T4490] do_syscall_64+0x4c/0xa0 [ 85.515472][ T4490] ? clear_bhb_loop+0x30/0x80 [ 85.520163][ T4490] ? clear_bhb_loop+0x30/0x80 [ 85.524946][ T4490] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.530854][ T4490] RIP: 0033:0x7fea56df3749 [ 85.535342][ T4490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.555241][ T4490] RSP: 002b:00007fea55039038 EFLAGS: 00000246 ORIG_RAX: 00000000000000dd [ 85.563863][ T4490] RAX: ffffffffffffffda RBX: 00007fea5704a090 RCX: 00007fea56df3749 [ 85.571949][ T4490] RDX: 0000000000020000 RSI: 000000000000fcff RDI: 0000000000000004 [ 85.579959][ T4490] RBP: 00007fea56e77f91 R08: 0000000000000000 R09: 0000000000000000 [ 85.587956][ T4490] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 85.595983][ T4490] R13: 00007fea5704a128 R14: 00007fea5704a090 R15: 00007ffefacfb298 [ 85.603970][ T4490] [ 85.607304][ T4490] Kernel Offset: disabled [ 85.611630][ T4490] Rebooting in 86400 seconds..