last executing test programs: 2.854079894s ago: executing program 3 (id=262): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x20280, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300000000000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r2, 0x0, 0xfffffffffffffff4}, 0x18) unshare(0x62040200) close(r0) socket$netlink(0x10, 0x3, 0x0) 2.207769847s ago: executing program 3 (id=272): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 1.885381133s ago: executing program 3 (id=277): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000170000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.824503425s ago: executing program 2 (id=278): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x8, &(0x7f0000000000), 0x1, 0x51a, &(0x7f0000001200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x151080, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086602, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) 1.724633576s ago: executing program 3 (id=280): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x600, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='mm_page_free\x00', r4, 0x0, 0x2}, 0x18) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0) msgget$private(0x0, 0x100) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000a40)=""/39, 0x27) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000940)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x2, 0x7ffc1ffb}]}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r10}, 0x10) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r8, 0x8983, &(0x7f0000000000)={0x1, 'vlan0\x00', {}, 0xff7f}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000240)={'veth0_to_hsr\x00', 0x0}) bind$packet(r11, &(0x7f0000000300)={0x11, 0x1b, r12, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) 1.600256039s ago: executing program 1 (id=282): bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) bind$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.491243801s ago: executing program 4 (id=283): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023892) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000002c0)=@int=0x8, 0x4) 1.400247373s ago: executing program 1 (id=285): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="ac0100001700010000000000000000007f0000010000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000ffffffff0000000000000000000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000f9ffffff00000000000000000000000084000500ffffffff000000000000000000000000000004d53c"], 0x1ac}}, 0x0) 1.400122903s ago: executing program 2 (id=286): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000c80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r1, 0x0, 0x10000000000000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) truncate(0x0, 0x0) 1.375990193s ago: executing program 4 (id=287): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r0}, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0xa, 0x200, 0x7, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r1, &(0x7f0000000a40), &(0x7f0000000040)=""/98}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/89}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, &(0x7f0000000300)=""/239, &(0x7f0000000400), &(0x7f0000000480), 0x2, r1}, 0x38) 1.265885335s ago: executing program 1 (id=288): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000280)=""/172, 0xac, 0xe0) shutdown(r0, 0x1) io_uring_setup(0x36f0, &(0x7f0000000040)={0x0, 0xa1b1, 0x8, 0x3, 0x2e1}) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18) syz_clone(0x40800045, 0x0, 0x0, 0x0, 0x0, 0x0) 1.180169427s ago: executing program 2 (id=290): socket(0x10, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000f8dbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.142588478s ago: executing program 4 (id=291): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000001540)="028988a8", 0x4, 0x8000050, &(0x7f0000000080)={0x11, 0x8100, r3, 0x1, 0xfb}, 0x14) 888.149363ms ago: executing program 4 (id=293): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000940)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000780), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106}}, 0x20) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead963cdd7f792f14c9b24493f9f830f6de8da93bbd4357095631adec14224dd9bb049e826f3a49624393e6a031103faff0902ba88ae30af4a61caa77ff956214196fcf3c5536d823284306f367afcb46fb43231911cc53091671e7d853ebf015241b18e9fb6ac6d9a7a1b05dfd6d9e56a51567cd8837dd045abf6b85550f0dd8dded43147ab9bfadc18b9984699d5d875cb21a95a7f584d8c466d033df75193f9ae58b85cfacc54f6c6e12a0debe40ee361a839563bc2cb64271672a55370c2b035b482074ce2487ef8a3bc1c68856e6e09539276d961a0c647f1ee3237496fc99623e8fd33faf7797d86a88dcee152d15e10739bcbbd6077b76867e291f350d999024c12faf81f83792f48f7f6dd66aa6854e460ef7f8c755f3a6dd76509ea0d2db39057a5129185b2fb11546cd5d6cc59f640e9028ae6c7075fba5e5b5593d7f79ec387833f465d09bde464112821eaec5e6e8f2aee8d7358f9c14afe2018856f610848706c71cda62493aef2e39efb71b4a8e804847eda66b2b5b1d75b478f19208ee1ac43afb2dbbba5dd0f29f6946022e09fb853cb176ca3474ba2fa67cb245fe85ec61a095d6fd9ac2ac5685920201617342fe56072427b9bd3626a1a371e67041fcda781be0c234d6feb5ad500e8bc7074381fd0d04983a4a6cdb6c8e03d59dc50925e9e4b24e6f8e455f02818959f2927f0a2d9ff62ec3c5c399077048f7d3dad0830b2e6563693f2f9d48eca8c34804a7626282a4a214d13786993c011a88194dbf7b23e25f592e62186c9fb565fac7632de356153c89a6be0b6b26ba48c2427424769fcbd7ee072ed4bd4d0731d06c8537d616b1145a6c70edb13fb4dba3565221b3a2897a23861cd0e8e0060021cdd7de002d5e785e5d6d3d07f4e445ada9c8d9ba8b819d0b5c7b5d15a5192d3a83c125c8e117c823a9e33316b8c9154e7330d3a865048dbd9c14757691bfe56f10423f6ab717bec5eebeac6ba9ad1aeb6cde09d7fda8e475a71ac48d46b8d9a40879c9dec2db5c4799e5fc8e8b3d419031c1033fce88ae2c93d7ca62c9302e6b45ca8dfebe5b92724f035e8e9d7704efb23f445999fe08cfa28404874d8acc8d37870d394d9fcc8dbe763bc85c37f0f3bcc2cbea420cd073db598e7d89c14a31e5bf57cbefa301427c93091505f1f3e5cdf712958b2e8fc56684d3388107c1728f0e5a3be2164246071653e256ed3bf3000c17301da9a5a3d9ca475867c4f311a24e5ae909a62047a9e6bb71cbcb4f159c2ef0f66b4d0f9da51aba99cd9448443dd277362af18d32f111c48a952ef555b2c7c58b997ce61e74cc7551b57eaffe411219baddf490926d8e260dcd87c069e617195c352950f9b51ce88c12c4f7997ba515f77e68d44f831cdf4d7ee8b1b7cedcb4c4fc7e85ba288c8555d49d5b4b9bb70dc4b688bd12e6b38e37150f3ea457a76b23d5abe6551ea598e090aed87822b0954b8db1a7c605c925b7f9240b0e7a020f292a1fd4a37c74139bc6e7ff08373ebfc8feea371ae0b6c61c715f6f1f4b0b994c7e2e129f87db959aae6ff48664d824b29ba9f255890f9c537178db9c5302097891557f8175a46f308b1a2530aa726ea9d4cfce76db50637369724d0c5f51c97edb58ff5eb9b2434b3721b61688ba12471b97c6a65ba085e15406568ac852590701f2ef8451c5cf1191d70f51eaea9ddc4cbdd7428f627db5069111f65062d5cc34581826af3e670613dda99e31c42736aabd87be56e214ed606862a152455f91891b7430bae03284569c234588f495a5ecc4a23fad6ba34e2ee9ebde8c7f5f62c9344659375c2a1fe6fa6e4ef68712223b9471c513bb11429dbb8a45463c8882f462275ee0da567c60c2d8038843e0c20486676e9978f2aec9187820c94a6e7e519d06daf2ab198f5cafcab4d9c90a479800906192d66a3301a34fa6c5a931cea0a479a4d98d86d9de3e061323504b57186dd33df7a16ccb688c0de203666cb0a6b543a9d069dded44a3b432cbb71da921dcab6be1c2d7494d3b07841d9b4f9d659b5d3d3b2ed916f91588d589128e4b2d4448e6aab5a8160eddca0f6e022abb85e251a11cd6bae57a09b2c434ab5bdf6264afb20d5ab022d152e345bd32ba9283aa5b3cd9118bd271a8ac9083c98b8a83064e65428f7ad7b35bf1d60d4e703f22d2d316fc12bd68bcced82cf0962a3d5769c6a3d75d59f7a7b76454661fd3574b8c8e26d20c372407854505ea6c2406fbd8a1ba7bb017c565228aa6d03d18ed309a308ffb1ecec73c246413e7c70f25070eafed9e70d22e9e8b44125c44eceff37e65bf073bc6fad1ea2b72675af4bf70586a8f7e0f35700de94c802522897576ed115fa21b3d23a367844520b33f5b9aedc0245096765f4cb3b2ff4e54f39bd7346c2347875d75a931b17c6c424ddb4767e0e63cc7725a8fc4b1dbe7929b2f909cc5be8b09e63330341e6471dcac0f8b44693d01805a1467b71612260e2a273861b3697440a5f75497796bffcf79d62a4a50a6ed5ef2efe8c83374f2ecd08d8d628aa03b01a11caeb2bdecc0ab2abcecfa15627979d7c3f9dec5389fc6625e957f8075e23e636dd5514596189d568e14d33ae518e6e9978c6a36a74b49fdbd1260095c9abe447e618878039b75e305b1d2c9ddeb9e5cedb11802e0833739d8595d57d749c890c9290cca4aa96e6718747543796a187e54a66c2f71beefddf911a7a74b59c48ba642d5ecd4d415f48dfbde5baac8a4ba063c1b985d9f9f3180e8a1c8b2cf6a25c2ff17688cc858ac8b9c67960f09a1ca5f28f8e877159e00fe7fb10cca73b391508895e7e52c22f9b38d73dabd6ff7c55ebf4e1611daee8d52b4ceee49a6df7daeb81bf9d1c943a74c03d3dda52c5b99f3225c1b87074f5cef6187878bc5b665ec0561adcc9781280dd1c6592555d327afea78b21beeeb66a0af3eab3249245f41cdbca309d3fba5d4b345319dd0a26134c0c896f2c8d32fda28600013f6a4c95b4038faba70d6c480b360c55bdc0595f7ca636e85521ba505d894f9c5f0a90719bc9944f386ad7491422ff12f34a3c048708d51305a8cc5b2a502ac1575a14c75e9fb7219ede2f6d9c1b362230b6189e0d8cd8ccd11fd0325182c6e46c9977bf63aa02f7024aeb4389f989f5733a198b45e4329c4c1a538a009f216ad3ac09cac39547b4fd21a5d7146ea307ad9b9339f39d5161d17b59860a0aed38cd89d1b68c6438346d51a3a283074e34ee01d2eca527b1b3836ccdf7e807007152c79d14324e3d887c9551a9447527db4434810f5b0b73d855f32a0c89aa784e43f4c1657d408dd33f88aeae1e5186bbcc2a348b708e3cec9080e12ee3676beb5ee86a9b5cc4a3496c242b95a248906ed62f984b22373bdfd97515441f34e01006d8d1244aa88403f207cd8820ffe07634fc86d00f871c1e4c9e8fc1a00d295e36d98119599b62379cda10ada85efe7b50c5f38d8d010a2cd53db900939db1ffce14feffb7940d12842f4f2b507e1fa49e526752d1e3d80a0c2a75e870d85f77fd91fc46ac1b1288dd33338cdad154d6b80b5a925431868d62a3fb0036f28fe259a3f555f767526a9ea230c33843efc49ac3182a357845ea122d606ab22c9f937b2b905e02dd1cb07d380e3486be6167f00b6e6d90a3c1d6aee15da439a55542ce177e498998ba8ac69a848e63e4c7564e4dc04aad595fa1ab81275edafa0d352029c304200d2f2c5881cbf5a26b2141bdb117879cc11e7c13bd62f221ae1ac04dca3d8d58a13c130557ecf5f36184c7366d3852d0cbd6ca42f2a971d87c0bb204097af1a3abdab7b95d07fcdbf5f42607695dedcd26e30b8fc5cfd7b333a95f3ee69d5ba7911dadb1394285c437a0f26fc027737ba5ee7d63333f80acb59f1a7faf2ec3031c6533107502bffc92d8726a48ce00cdb5f1258d85ff8eb72bfb162e122022f1f3e8a72b41d2689d5228b1130fbc946384401f3bbe726314bb09d430333ad78de07b3cec5c18a4f4abb69507b6451ca4e610b8fc988c983426e0cc3b9d15393026eb75d3d08634b8a7495cef69aab83d27ea1b5b41f40b996dd10023d81f77d61192930ffc25cae1e149412322fcb0aa47bee3afc44ec3dda96c9294854e2cbaebfea6f9a90f0b3797d5f505824b4de964151569f881f87f9dd9d30a2a2f9ed01059a909cba157902903c77f2f3d056231e7c7483a3f35e04360e084f0d3f94a92c92c77b3f06479fbc417366d7fe87ddfcdfd86274f87a5f817b0f947924cbe2329f16f6b00c8a0ab96164f7b35fed38a388380af05c3600abc37a944c9e75a691728c26896ac3615297766f406aeb0f2fd147d68fad3fb3b032880280ebb4bf89252a36b0d9eb393daae72829b8da870b886676244897d5322b32703fcf138b66eedeb3024666a88fd99d8962f696ab7b34e19ced1bd27488aa2ffe5bfa11f8f9289bd8c052d4e88316cc33b0255ef1bfca4c17067d7f78175c56db481fe8dc6f73b1cbdf9d5823f115c9e03f2dfd07bc1ad88564d48b18cd9a30d83cbd5e6a3eedcb0ee86e5dd47f32820cb74dcf730b2052b31297b529e5e24f042335d13915e4048132fe1a101841e919c7870bb680eddead9a6111394bc12e274fbd88abaf2d254721c42e82abf4d1e319a631794ed6ce319ddd844ac5e9b1fc96dd9aaad42f2e087abe1b85430c4a00631970e3e74a6ed923f49e0df75685e044fae3fcea0af4dbfeebe0a9c2e73e8a89b89603a75f585e3ebba5453ae595da1469ea90ea3c9fb6a22411c56c58dfbf504caa629dbfc73ebbedc91669f2babf8b8215c525edf8feb366f104ffa9eb2bb79232660aece4730ef1ae8585c629ffe1390356a58e900da145b83ad177c7bb2d125e59d7ff4d3a8562efc620b4cf9b33c2305bbf1957e0f8b06f0fbe9c80db73b08fdd0be4a1ea4f91f52af47160040424aed8ac3c10251fb0b5d9be08247edf3dda5d1750d0597d60c8a0d9418a4e0c9325bb90f0886f9e5dda9e88ac1942ec1e53da0cf5ccad66b9cdfc2fdca784dd06a73713ef73785706d024873ddca5ccfcf0b91748a2c1fbd8c241934b5b473007b29d76aec5addf7b945a5f7abd6ddeccc8d0ccb26d69d4793b7224c27ba7bf45aac8a2be56086ab8c65ea69fdd593a01a29e2912378002d824bd98e6ed1c5dd5f33be529e640997f5f1bbde051fb2a669145966db4889bf32aa13777ac6c077c51bb8b2523954cea3adc307cfe53b8cbb00edf0c04c456392aea6613e8078a309dc538a6a24f80fc1b7f9fce3e3291ca6dab8090a634fcdb24e7a9de8aecd595b988f597cd623d148a8841b0a5203953166ea2e85316928f28dd2604d37c9ec80a49c0d91cbfe6d584b9b6a321b97bf99ae1d67985fd441976a828c97456003a7892c7c7f4a51bb49e3d3ea1e95ec29c89a2676", 0x1001}], 0x3) 887.927383ms ago: executing program 2 (id=294): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c40)=[{{&(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}, {{&(0x7f00000003c0)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x2, 0x4814) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x2, 0x9, 0x5, 0xb}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 887.773513ms ago: executing program 0 (id=295): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r0 = socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x4) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @rand_addr=0x64010100}}}], 0x20}}], 0x1, 0x40) 786.278774ms ago: executing program 0 (id=296): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000020000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000190a01"], 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x20002004) 697.855906ms ago: executing program 0 (id=297): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 556.194459ms ago: executing program 3 (id=298): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x4) 556.046859ms ago: executing program 4 (id=299): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030c00000000000000000000000100090000000000030006006c0000000200000000000000000000000000800002000100000000000002060b00000000030005000000000002000000000000000000000000000000010018"], 0x60}, 0x1, 0x7}, 0x0) 555.764329ms ago: executing program 2 (id=300): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x14) write$cgroup_int(r3, &(0x7f0000000000)=0xfe8e, 0x12) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f00000001c0)={@mcast1, 0x5c, r5}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000040a010200000048adecaf000300003413150b4000000004"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20080000) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r8, 0x0, 0x100000000}, 0x18) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="6401000010001307ff6ce079167e05d74501039d0e626767415ad95d60b0c8ccdc800000fcdbdf25200100000000000000000000000000002001000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x880}, 0x2000) 510.09947ms ago: executing program 0 (id=301): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 391.072192ms ago: executing program 0 (id=302): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r1 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x11f8, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r1}) io_uring_enter(r1, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 291.063034ms ago: executing program 1 (id=303): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x917, 0xa7, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3f}]}, 0x1c}}, 0x0) 172.251657ms ago: executing program 1 (id=304): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000002c0)={r3, 0x11, 0x6}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 162.615167ms ago: executing program 0 (id=305): mremap(&(0x7f0000fef000/0xf000)=nil, 0xf000, 0x2000, 0x0, &(0x7f0000ff4000/0x2000)=nil) msync(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6) socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x4d, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095b7020000010000008500000084000001b70000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_io_uring_setup(0x497, 0x0, &(0x7f0000000540), &(0x7f0000000680)) socket$netlink(0x10, 0x3, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000340)=0x9, 0x800, 0x2) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) io_uring_enter(r2, 0x40f9, 0x217, 0xa5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="975b2abeb48fe534bad20085ffe1003e7b22578aed8a59a2", @ANYBLOB="03ff127a0cf972552d0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0) close(r3) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) r5 = syz_io_uring_setup(0x1108, &(0x7f0000000880)={0x0, 0x2, 0x80, 0x2, 0x31f}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r5, 0x471b, 0xfffffffe, 0x20, 0x0, 0xffffffffffffff68) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000140)='objagg_obj_parent_unassign\x00', r3, 0x0, 0xfffffffffffffc01}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r8, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2f}, 0x0, 0x20042, 0x1}) 71.496758ms ago: executing program 2 (id=306): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000200000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) 229.79µs ago: executing program 3 (id=307): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0) pwritev2(r0, 0x0, 0x0, 0xfffff986, 0x0, 0x0) 126.67µs ago: executing program 4 (id=308): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x78, 0x30, 0xb, 0x70bd26, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x78}}, 0x20000080) 0s ago: executing program 1 (id=309): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="180000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) close_range(r0, r1, 0x0) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 35.289064][ T3854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.298169][ T3854] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.8' (ED25519) to the list of known hosts. syzkaller login: [ 57.148156][ T4172] cgroup: Unknown subsys name 'net' [ 57.287618][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.647755][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 60.448567][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 60.475581][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 60.516147][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 60.665125][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 60.674734][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.683784][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.691893][ T4184] device bridge_slave_0 entered promiscuous mode [ 60.709792][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.717156][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.725201][ T4183] device bridge_slave_0 entered promiscuous mode [ 60.747913][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.755279][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.763603][ T4184] device bridge_slave_1 entered promiscuous mode [ 60.770934][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 60.780244][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.787430][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.795460][ T4183] device bridge_slave_1 entered promiscuous mode [ 60.815545][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.822750][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.830614][ T4191] device bridge_slave_0 entered promiscuous mode [ 60.865719][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.872962][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.880798][ T4191] device bridge_slave_1 entered promiscuous mode [ 60.894379][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.905071][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.932968][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.943686][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.986860][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.997840][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.040728][ T4184] team0: Port device team_slave_0 added [ 61.056666][ T4183] team0: Port device team_slave_0 added [ 61.068487][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.075994][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.083789][ T4186] device bridge_slave_0 entered promiscuous mode [ 61.099491][ T4184] team0: Port device team_slave_1 added [ 61.106852][ T4183] team0: Port device team_slave_1 added [ 61.113450][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.120503][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.128351][ T4195] device bridge_slave_0 entered promiscuous mode [ 61.137315][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.144415][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.152362][ T4195] device bridge_slave_1 entered promiscuous mode [ 61.159389][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.166524][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.174687][ T4186] device bridge_slave_1 entered promiscuous mode [ 61.183327][ T4191] team0: Port device team_slave_0 added [ 61.222541][ T4191] team0: Port device team_slave_1 added [ 61.250778][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.268572][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.275657][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.302013][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.314342][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.321291][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.347389][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.360102][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.370813][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.381388][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.397195][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.404259][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.430158][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.446608][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.453606][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.479542][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.505636][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.512916][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.538973][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.570381][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.577562][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.607141][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.635957][ T4186] team0: Port device team_slave_0 added [ 61.644178][ T4195] team0: Port device team_slave_0 added [ 61.652790][ T4195] team0: Port device team_slave_1 added [ 61.665535][ T4186] team0: Port device team_slave_1 added [ 61.674684][ T4184] device hsr_slave_0 entered promiscuous mode [ 61.681505][ T4184] device hsr_slave_1 entered promiscuous mode [ 61.738764][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.746028][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.772060][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.784415][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.791364][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.817365][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.839006][ T4183] device hsr_slave_0 entered promiscuous mode [ 61.845965][ T4183] device hsr_slave_1 entered promiscuous mode [ 61.852954][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.860746][ T4183] Cannot create hsr debugfs directory [ 61.873323][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.880280][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.906281][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.923222][ T4191] device hsr_slave_0 entered promiscuous mode [ 61.929969][ T4191] device hsr_slave_1 entered promiscuous mode [ 61.936567][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.944258][ T4191] Cannot create hsr debugfs directory [ 61.964862][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.972205][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.998393][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.057764][ T4195] device hsr_slave_0 entered promiscuous mode [ 62.064752][ T4195] device hsr_slave_1 entered promiscuous mode [ 62.071299][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.078931][ T4195] Cannot create hsr debugfs directory [ 62.133392][ T4186] device hsr_slave_0 entered promiscuous mode [ 62.140193][ T4186] device hsr_slave_1 entered promiscuous mode [ 62.147036][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.155173][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 62.161323][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 62.161499][ T4186] Cannot create hsr debugfs directory [ 62.173474][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 62.179498][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 62.232184][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 62.419572][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.433924][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.443652][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.452970][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.501281][ T4186] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.518820][ T4186] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.543283][ T4186] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.563236][ T4186] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.583331][ T4191] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.592769][ T4191] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.605702][ T4191] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.626779][ T4191] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.707115][ T4184] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.718787][ T4184] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.727799][ T4184] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.739194][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.754881][ T4184] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.785550][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.795513][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.810469][ T4195] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.836743][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.852721][ T4195] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.864295][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.880469][ T4195] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.901283][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.909911][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.920164][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.927969][ T4195] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.961093][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.970374][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.979601][ T1265] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.986808][ T1265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.996257][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.005986][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.015039][ T1265] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.022128][ T1265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.029731][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.039195][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.048621][ T1265] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.055714][ T1265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.064843][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.073565][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.082370][ T1265] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.089414][ T1265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.097134][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.106690][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.117416][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.125926][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.141190][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.168155][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.178619][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.190187][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.200518][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.209320][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.218258][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.228595][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.251389][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.261463][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.270634][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.297604][ T4183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.309598][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.328605][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.336436][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.345077][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.354728][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.363930][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.372512][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.380711][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.389308][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.398725][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.407274][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.415377][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.424006][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.464774][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.481257][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.491290][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.498420][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.511444][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.520611][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.529274][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.536371][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.544073][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.554305][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.562605][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.571159][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.597576][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.616516][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.630645][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.640541][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.687844][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.700400][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.709842][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.719438][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.728762][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.738689][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.747419][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.756718][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.765381][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.773417][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.782251][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.804525][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.814172][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.823132][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.830183][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.840393][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.856290][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.869077][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.876174][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.886275][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.905747][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.928109][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.943856][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.958477][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.966324][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.982782][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.993245][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.001669][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.009832][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.018211][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.027163][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.036382][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.048017][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.062242][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.070689][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.086801][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.099346][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.113609][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.125224][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.148430][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.156516][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.166432][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.175264][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.184162][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.191890][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.214793][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.231486][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.238650][ T4234] Bluetooth: hci2: command 0x041b tx timeout [ 64.242300][ T4261] Bluetooth: hci1: command 0x041b tx timeout [ 64.250805][ T4234] Bluetooth: hci3: command 0x041b tx timeout [ 64.263209][ T4186] device veth0_vlan entered promiscuous mode [ 64.272746][ T4234] Bluetooth: hci0: command 0x041b tx timeout [ 64.293416][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.301783][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.310378][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.312680][ T4260] Bluetooth: hci4: command 0x041b tx timeout [ 64.320986][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.334287][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.342574][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.353910][ T4186] device veth1_vlan entered promiscuous mode [ 64.389640][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.400184][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.409894][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.419026][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.428166][ T1265] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.435286][ T1265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.444754][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.453578][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.462516][ T1265] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.469584][ T1265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.477414][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.487205][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.495928][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.504854][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.536762][ T4191] device veth0_vlan entered promiscuous mode [ 64.552287][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.561261][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.570643][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.579753][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.588641][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.597268][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.606511][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.614834][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.623099][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.631679][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.640179][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.648586][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.657055][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.665149][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.687408][ T4191] device veth1_vlan entered promiscuous mode [ 64.700989][ T4183] device veth0_vlan entered promiscuous mode [ 64.707667][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.725599][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.738395][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.747326][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.755745][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.776510][ T4186] device veth0_macvtap entered promiscuous mode [ 64.789199][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.806246][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.814923][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.824471][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.838286][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.847586][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.863544][ T4186] device veth1_macvtap entered promiscuous mode [ 64.891181][ T4183] device veth1_vlan entered promiscuous mode [ 64.899352][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.914830][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.928132][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.938553][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.960214][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.974300][ T4191] device veth0_macvtap entered promiscuous mode [ 64.983914][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.996517][ T4186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.008589][ T4186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.017866][ T4186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.026815][ T4186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.038299][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.046436][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.054332][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.061713][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.070619][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.079889][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.088994][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.097798][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.106557][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.134877][ T4191] device veth1_macvtap entered promiscuous mode [ 65.145010][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.197673][ T4184] device veth0_vlan entered promiscuous mode [ 65.216471][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.227067][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.236846][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.245522][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.257251][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.265367][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.278736][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.289550][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.300933][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.311320][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.322477][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.334416][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.346465][ T4184] device veth1_vlan entered promiscuous mode [ 65.371371][ T4183] device veth0_macvtap entered promiscuous mode [ 65.380214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.395177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.408731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.417808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.426715][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.436036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.444920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.455219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.484265][ T4183] device veth1_macvtap entered promiscuous mode [ 65.503956][ T4191] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.527074][ T4191] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.536697][ T4191] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.545789][ T4191] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.576634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.584903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.594908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.604193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.636532][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.647202][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.657634][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.668288][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.681513][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.690362][ T4184] device veth0_macvtap entered promiscuous mode [ 65.702833][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.710924][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.720288][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.729132][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.738647][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.753427][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.765180][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.768347][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.775314][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.794913][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.800715][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.806417][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.824064][ T4184] device veth1_macvtap entered promiscuous mode [ 65.835097][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.844062][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.852855][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.868689][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.877780][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.886800][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.895752][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.961741][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.972448][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.984013][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.995178][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.005012][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.016678][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.027767][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.042950][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.053868][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.064000][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.075264][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.085291][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.095860][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.106659][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.114218][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.124159][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.132539][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.141001][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.150005][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.160086][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.168938][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.176903][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.186046][ T4195] device veth0_vlan entered promiscuous mode [ 66.209345][ T4184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.218473][ T4184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.230709][ T4184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.242614][ T4184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.254146][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.265026][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.270747][ T4195] device veth1_vlan entered promiscuous mode [ 66.288872][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.302078][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.317734][ T4246] Bluetooth: hci0: command 0x040f tx timeout [ 66.324227][ T4234] Bluetooth: hci3: command 0x040f tx timeout [ 66.327213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.330315][ T4234] Bluetooth: hci2: command 0x040f tx timeout [ 66.339627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.350880][ T4234] Bluetooth: hci1: command 0x040f tx timeout [ 66.356148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.366817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.398612][ T4195] device veth0_macvtap entered promiscuous mode [ 66.398675][ T4234] Bluetooth: hci4: command 0x040f tx timeout [ 66.421684][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.425635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.435199][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.448591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.465437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.488071][ T4195] device veth1_macvtap entered promiscuous mode [ 66.508553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.526342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.551277][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.588552][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.601460][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.617174][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.632927][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.643948][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.654600][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.665369][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.676198][ T26] audit: type=1326 audit(1757589519.438:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4295 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441d22eba9 code=0x7ffc0000 [ 66.677604][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.723625][ T4299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 66.736573][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.744810][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.762594][ T26] audit: type=1326 audit(1757589519.478:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4295 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f441d22eba9 code=0x7ffc0000 [ 66.792787][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.797174][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.809706][ T4301] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 66.830362][ T26] audit: type=1326 audit(1757589519.478:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4295 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441d22eba9 code=0x7ffc0000 [ 66.848288][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.882068][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.903289][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.917876][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.929162][ T26] audit: type=1326 audit(1757589519.478:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4295 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f441d22eba9 code=0x7ffc0000 [ 66.967532][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.977610][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.989665][ T26] audit: type=1326 audit(1757589519.478:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4295 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441d22eba9 code=0x7ffc0000 [ 67.012969][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.023086][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.034940][ T26] audit: type=1326 audit(1757589519.478:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4295 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f441d22eba9 code=0x7ffc0000 [ 67.057992][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.069488][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.076313][ T26] audit: type=1326 audit(1757589519.488:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4295 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441d22eba9 code=0x7ffc0000 [ 67.091461][ T4195] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.106813][ T26] audit: type=1326 audit(1757589519.488:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4295 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f441d22eba9 code=0x7ffc0000 [ 67.127026][ T4195] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.136767][ T26] audit: type=1326 audit(1757589519.488:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4295 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441d22eba9 code=0x7ffc0000 [ 67.159964][ T4195] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.159992][ T4195] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.198972][ T1265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.215510][ T1265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.236465][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.260714][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.278044][ T26] audit: type=1326 audit(1757589520.038:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4310 comm="syz.1.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee38959ba9 code=0x7ffc0000 [ 67.306747][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.853777][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.937758][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.188868][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.216458][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.249707][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.260045][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.351428][ T4302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.373594][ T4302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.398321][ T4246] Bluetooth: hci1: command 0x0419 tx timeout [ 68.404523][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.415005][ T1265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.437070][ T4246] Bluetooth: hci2: command 0x0419 tx timeout [ 68.453683][ T4294] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 68.459225][ T4246] Bluetooth: hci3: command 0x0419 tx timeout [ 68.467743][ T1265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.485820][ T4246] Bluetooth: hci0: command 0x0419 tx timeout [ 68.500251][ T4234] Bluetooth: hci4: command 0x0419 tx timeout [ 68.510234][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.557539][ T4329] loop3: detected capacity change from 0 to 1024 [ 68.574221][ T4329] EXT4-fs (loop3): Ignoring removed orlov option [ 68.613647][ T4331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14'. [ 68.650421][ T4329] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,auto_da_alloc,sysvgroups,norecovery,jqfmt=vfsv0,orlov,nogrpid,noauto_da_alloc,user_xattr,,errors=continue. Quota mode: none. [ 68.742053][ T4294] usb 2-1: Using ep0 maxpacket: 8 [ 69.532583][ T4294] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.547952][ T4294] usb 2-1: config 0 has no interfaces? [ 69.554108][ T4294] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 69.563585][ T4294] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.576114][ T4294] usb 2-1: config 0 descriptor?? [ 69.832648][ T4357] loop0: detected capacity change from 0 to 512 [ 70.029229][ T4357] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 70.052630][ T4365] loop2: detected capacity change from 0 to 256 [ 70.059724][ T4357] ext4 filesystem being mounted at /5/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.088476][ T4357] EXT4-fs error (device loop0): ext4_do_update_inode:5204: inode #4: comm syz.0.22: corrupted inode contents [ 70.121044][ T4357] EXT4-fs error (device loop0): ext4_dirty_inode:6040: inode #4: comm syz.0.22: mark_inode_dirty error [ 70.146849][ T4357] EXT4-fs error (device loop0): ext4_do_update_inode:5204: inode #4: comm syz.0.22: corrupted inode contents [ 70.165492][ T4369] loop4: detected capacity change from 0 to 512 [ 70.172260][ T4357] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #4: comm syz.0.22: mark_inode_dirty error [ 70.192349][ T4357] EXT4-fs error (device loop0): ext4_acquire_dquot:6209: comm syz.0.22: Failed to acquire dquot type 1 [ 70.213103][ T4372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28'. [ 70.218199][ T4365] FAT-fs (loop2): Directory bread(block 64) failed [ 70.224828][ T4369] ======================================================= [ 70.224828][ T4369] WARNING: The mand mount option has been deprecated and [ 70.224828][ T4369] and is ignored by this kernel. Remove the mand [ 70.224828][ T4369] option from the mount to silence this warning. [ 70.224828][ T4369] ======================================================= [ 70.264800][ T4365] FAT-fs (loop2): Directory bread(block 65) failed [ 70.271503][ T4365] FAT-fs (loop2): Directory bread(block 66) failed [ 70.280177][ T4365] FAT-fs (loop2): Directory bread(block 67) failed [ 70.287661][ T4365] FAT-fs (loop2): Directory bread(block 68) failed [ 70.306102][ T4365] FAT-fs (loop2): Directory bread(block 69) failed [ 70.316860][ T4365] FAT-fs (loop2): Directory bread(block 70) failed [ 70.323846][ T4365] FAT-fs (loop2): Directory bread(block 71) failed [ 70.340748][ T4365] FAT-fs (loop2): Directory bread(block 72) failed [ 70.351093][ T4365] FAT-fs (loop2): Directory bread(block 73) failed [ 70.380085][ T4369] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 70.409128][ T4369] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 70.427530][ T4369] EXT4-fs (loop4): orphan cleanup on readonly fs [ 70.430372][ T4365] attempt to access beyond end of device [ 70.430372][ T4365] loop2: rw=2051, want=1768, limit=256 [ 70.459664][ T4369] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.27: bad orphan inode 267 [ 70.487836][ T4377] netlink: 16 bytes leftover after parsing attributes in process `syz.0.29'. [ 70.498042][ T4377] netlink: 'syz.0.29': attribute type 10 has an invalid length. [ 70.510710][ T4377] netlink: 40 bytes leftover after parsing attributes in process `syz.0.29'. [ 70.522289][ T4377] batman_adv: batadv0: Adding interface: virt_wifi0 [ 70.528963][ T4377] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.552195][ T4369] EXT4-fs (loop4): Remounting filesystem read-only [ 70.561292][ T4377] batman_adv: batadv0: Interface activated: virt_wifi0 [ 70.598144][ T4369] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,noblock_validity,discard,errors=remount-ro,jqfmt=vfsv0. Quota mode: none. [ 70.676780][ T4377] loop0: detected capacity change from 0 to 512 [ 70.743934][ T4369] syz.4.27 uses obsolete (PF_INET,SOCK_PACKET) [ 70.817052][ T4377] EXT4-fs error (device loop0): ext4_quota_enable:6417: inode #4: comm syz.0.29: iget: bogus i_mode (4200) [ 70.883493][ T4377] EXT4-fs error (device loop0): ext4_quota_enable:6420: comm syz.0.29: Bad quota inode: 4, type: 1 [ 70.897853][ T4377] EXT4-fs warning (device loop0): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 70.987737][ T4377] EXT4-fs (loop0): mount failed [ 71.122716][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.129404][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.293886][ T4377] loop0: detected capacity change from 0 to 1024 [ 71.315232][ T1335] usb 2-1: USB disconnect, device number 2 [ 71.400070][ T4377] EXT4-fs (loop0): Ignoring removed bh option [ 71.455043][ T4377] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e80ce018, mo2=0000] [ 71.476128][ T4377] System zones: 0-1, 3-12 [ 71.548365][ T4377] EXT4-fs error (device loop0): ext4_map_blocks:739: inode #3: block 1: comm syz.0.29: lblock 1 mapped to illegal pblock 1 (length 1) [ 71.642252][ T4377] EXT4-fs error (device loop0): ext4_acquire_dquot:6209: comm syz.0.29: Failed to acquire dquot type 0 [ 71.714025][ T4377] EXT4-fs error (device loop0): ext4_free_blocks:6218: comm syz.0.29: Freeing blocks not in datazone - block = 0, count = 4096 [ 71.779195][ T4377] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.29: Invalid inode bitmap blk 0 in block_group 0 [ 71.802156][ T9] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 71.848566][ T9] __quota_error: 140 callbacks suppressed [ 71.848580][ T9] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 71.872018][ T4377] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 71.899103][ T9] EXT4-fs error (device loop0): ext4_release_dquot:6245: comm kworker/u4:0: Failed to release dquot type 0 [ 71.911770][ T4377] EXT4-fs (loop0): 1 orphan inode deleted [ 71.918634][ T4377] EXT4-fs (loop0): mounted filesystem without journal. Opts: ; usrquota,discard,bh,max_batch_time=0x00000000000008c9,debug,discard,,errors=continue. Quota mode: writeback. [ 71.950177][ T2163] cfg80211: failed to load regulatory.db [ 72.219995][ T4377] netlink: 'syz.0.29': attribute type 21 has an invalid length. [ 72.238556][ T4377] netlink: 156 bytes leftover after parsing attributes in process `syz.0.29'. [ 72.262023][ T4377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.29'. [ 73.628264][ T4471] loop0: detected capacity change from 0 to 512 [ 73.760502][ T4471] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 73.802803][ T4471] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.991044][ T4484] loop2: detected capacity change from 0 to 1024 [ 74.019666][ T26] audit: type=1326 audit(1757589526.778:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4485 comm="syz.4.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4cc3ddba9 code=0x7ffc0000 [ 74.062850][ T26] audit: type=1326 audit(1757589526.778:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4485 comm="syz.4.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4cc3ddba9 code=0x7ffc0000 [ 74.109805][ T26] audit: type=1326 audit(1757589526.818:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4485 comm="syz.4.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe4cc3ddba9 code=0x7ffc0000 [ 74.172075][ T26] audit: type=1326 audit(1757589526.818:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4485 comm="syz.4.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4cc3ddba9 code=0x7ffc0000 [ 74.224032][ T4484] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 74.232954][ T26] audit: type=1326 audit(1757589526.818:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4485 comm="syz.4.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4cc3ddba9 code=0x7ffc0000 [ 74.259189][ T26] audit: type=1326 audit(1757589526.818:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4485 comm="syz.4.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe4cc3ddba9 code=0x7ffc0000 [ 74.282973][ T26] audit: type=1326 audit(1757589526.818:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4485 comm="syz.4.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4cc3ddba9 code=0x7ffc0000 [ 74.305723][ T26] audit: type=1326 audit(1757589526.818:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4485 comm="syz.4.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4cc3ddba9 code=0x7ffc0000 [ 74.342336][ T26] audit: type=1326 audit(1757589526.818:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4485 comm="syz.4.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe4cc3ddba9 code=0x7ffc0000 [ 74.496334][ T4484] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3871: comm syz.2.70: Allocating blocks 497-513 which overlap fs metadata [ 74.588981][ T4511] loop1: detected capacity change from 0 to 512 [ 74.597841][ T4483] EXT4-fs (loop2): pa ffff8880766dac40: logic 64, phys. 209, len 19 [ 74.606333][ T4483] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 1 [ 74.670995][ T4511] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 74.690517][ T4511] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.713033][ T4514] loop4: detected capacity change from 0 to 1024 [ 74.784315][ T4514] EXT4-fs (loop4): Ignoring removed nobh option [ 74.790622][ T4514] EXT4-fs (loop4): inline encryption not supported [ 74.867731][ T4514] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 74.986028][ T4514] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,nodelalloc,dioread_lock,data_err=ignore,resgid=0x0000000000000000,jqfmt=vfsold,journal_dev=0x0000000000000800,nobh,inlinecrypt,grpquota,dioread_nolock,,errors=continue. Quota mode: writeback. [ 75.466109][ T4540] ALSA: seq fatal error: cannot create timer (-19) [ 75.660896][ T4547] netdevsim netdevsim4: Direct firmware load for .. failed with error -2 [ 75.693239][ T4547] netdevsim netdevsim4: Falling back to sysfs fallback for: .. [ 75.979368][ T4564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.101'. [ 75.999680][ T4563] loop1: detected capacity change from 0 to 512 [ 76.024758][ T4564] device team1 entered promiscuous mode [ 76.030571][ T4564] Zero length message leads to an empty skb [ 76.104129][ T4563] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.100: bg 0: block 248: padding at end of block bitmap is not set [ 76.148974][ T4563] EXT4-fs error (device loop1): ext4_acquire_dquot:6209: comm syz.1.100: Failed to acquire dquot type 1 [ 76.241234][ T4563] EXT4-fs (loop1): 1 truncate cleaned up [ 76.253541][ T4578] loop3: detected capacity change from 0 to 1024 [ 76.262374][ T4563] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 76.274685][ T4563] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.314417][ T4578] EXT4-fs (loop3): Ignoring removed bh option [ 76.331505][ T4578] EXT4-fs (loop3): Ignoring removed nobh option [ 76.351739][ T4578] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 76.486451][ T4582] loop2: detected capacity change from 0 to 512 [ 76.509995][ T4578] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,bh,dioread_lock,acl,noload,data_err=ignore,grpquota,nobh,bsdgroups,auto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 76.559708][ T4587] loop4: detected capacity change from 0 to 512 [ 76.611661][ T4578] EXT4-fs (loop3): shut down requested (1) [ 76.643318][ T4582] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.110: error while reading EA inode 32 err=-116 [ 76.705704][ T4589] loop1: detected capacity change from 0 to 2048 [ 76.710854][ T4582] EXT4-fs (loop2): Remounting filesystem read-only [ 76.742028][ T4582] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 76.820712][ T4589] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,,errors=continue. Quota mode: none. [ 76.832694][ T4582] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.110: error while reading EA inode 32 err=-116 [ 77.011939][ T4582] EXT4-fs (loop2): Remounting filesystem read-only [ 77.026942][ T4582] EXT4-fs (loop2): 1 orphan inode deleted [ 77.037872][ T4582] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,discard,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,jqfmt=vfsv1,abort,data_err=ignore,. Quota mode: none. [ 77.941156][ T4637] netlink: 'syz.3.126': attribute type 6 has an invalid length. [ 77.992759][ T4642] loop4: detected capacity change from 0 to 128 [ 78.032557][ T4644] IPv6: Can't replace route, no match found [ 78.052539][ T4646] process 'syz.0.129' launched '/dev/fd/4' with NULL argv: empty string added [ 79.254006][ T26] kauditd_printk_skb: 74 callbacks suppressed [ 79.254020][ T26] audit: type=1326 audit(1757589532.018:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4673 comm="syz.4.138" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4cc3ddba9 code=0x0 [ 79.345661][ T4679] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.140'. [ 79.414310][ T4679] openvswitch: netlink: Key type 2832 is out of range max 29 [ 79.422787][ T4669] +}[@ (4669) used greatest stack depth: 18592 bytes left [ 79.651863][ T26] audit: type=1326 audit(1757589532.408:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4687 comm="syz.1.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee38959ba9 code=0x7ffc0000 [ 79.749202][ T26] audit: type=1326 audit(1757589532.408:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4687 comm="syz.1.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee38959ba9 code=0x7ffc0000 [ 79.856279][ T26] audit: type=1326 audit(1757589532.408:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4687 comm="syz.1.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee38959ba9 code=0x7ffc0000 [ 79.954045][ T26] audit: type=1326 audit(1757589532.408:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4687 comm="syz.1.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee38959ba9 code=0x7ffc0000 [ 80.057374][ T26] audit: type=1326 audit(1757589532.408:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4687 comm="syz.1.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee38959ba9 code=0x7ffc0000 [ 80.164182][ T26] audit: type=1326 audit(1757589532.408:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4687 comm="syz.1.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fee38959ba9 code=0x7ffc0000 [ 80.239810][ T4715] loop4: detected capacity change from 0 to 1024 [ 80.261906][ T26] audit: type=1326 audit(1757589532.408:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4687 comm="syz.1.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee38959ba9 code=0x7ffc0000 [ 80.286976][ T4715] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 80.321983][ T4715] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 80.341926][ T26] audit: type=1326 audit(1757589532.408:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4687 comm="syz.1.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fee38959ba9 code=0x7ffc0000 [ 80.342318][ T4715] JBD2: no valid journal superblock found [ 80.377796][ T4715] EXT4-fs (loop4): error loading journal [ 80.386932][ T26] audit: type=1326 audit(1757589532.408:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4687 comm="syz.1.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee38959ba9 code=0x7ffc0000 [ 83.855105][ T4793] loop9: detected capacity change from 0 to 7 [ 83.910281][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.921388][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 83.972652][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.975849][ T4799] loop3: detected capacity change from 0 to 512 [ 83.983640][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 84.029340][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 84.040317][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 84.066183][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 84.077155][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 84.126900][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 84.137908][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 84.184404][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 84.195456][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 84.256730][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 84.267688][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 84.281276][ T4793] ldm_validate_partition_table(): Disk read failed. [ 84.310126][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 84.321079][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 84.383837][ T26] kauditd_printk_skb: 71 callbacks suppressed [ 84.383851][ T26] audit: type=1326 audit(1757589537.148:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4808 comm="syz.2.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441d22eba9 code=0x7ffc0000 [ 84.421995][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 84.433025][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 84.443803][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 84.454763][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 84.482557][ T4793] Dev loop9: unable to read RDB block 0 [ 84.502308][ T4793] loop9: unable to read partition table [ 84.508742][ T26] audit: type=1326 audit(1757589537.208:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4808 comm="syz.2.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f441d22eba9 code=0x7ffc0000 [ 84.567814][ T4793] loop9: partition table beyond EOD, truncated [ 84.658108][ T4793] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 84.658108][ T4793] ) failed (rc=-5) [ 84.713399][ T4799] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000000003,,errors=continue. Quota mode: writeback. [ 84.734036][ T26] audit: type=1326 audit(1757589537.208:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4808 comm="syz.2.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441d22eba9 code=0x7ffc0000 [ 84.822112][ T4799] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.832970][ T26] audit: type=1326 audit(1757589537.208:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4808 comm="syz.2.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441d22eba9 code=0x7ffc0000 [ 84.895301][ T4821] netdevsim netdevsim1: Direct firmware load for ./file0/file1 failed with error -2 [ 84.953942][ T4821] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0/file1 [ 84.977614][ T26] audit: type=1326 audit(1757589537.208:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4808 comm="syz.2.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f441d22eba9 code=0x7ffc0000 [ 84.986251][ T4823] loop0: detected capacity change from 0 to 256 [ 85.079444][ T4823] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 85.091946][ T26] audit: type=1326 audit(1757589537.208:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4808 comm="syz.2.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441d22eba9 code=0x7ffc0000 [ 85.192073][ T26] audit: type=1326 audit(1757589537.208:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4808 comm="syz.2.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441d22eba9 code=0x7ffc0000 [ 85.199142][ T4823] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 85.297715][ T26] audit: type=1326 audit(1757589537.558:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4818 comm="syz.0.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c46ebba9 code=0x7ffc0000 [ 85.362788][ T4823] netlink: 32 bytes leftover after parsing attributes in process `syz.0.191'. [ 85.391904][ T26] audit: type=1326 audit(1757589537.558:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4818 comm="syz.0.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c46ebba9 code=0x7ffc0000 [ 85.490986][ T26] audit: type=1326 audit(1757589537.558:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4818 comm="syz.0.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1c46ebba9 code=0x7ffc0000 [ 85.881360][ T4834] loop0: detected capacity change from 0 to 1024 [ 85.964075][ T4834] EXT4-fs (loop0): Ignoring removed bh option [ 86.022079][ T4834] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,noauto_da_alloc,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 86.399670][ T4852] loop2: detected capacity change from 0 to 128 [ 86.512154][ T4858] loop4: detected capacity change from 0 to 512 [ 86.594870][ T4858] EXT4-fs (loop4): inline encryption not supported [ 86.628760][ T4858] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,inlinecrypt,,errors=continue. Quota mode: none. [ 86.727261][ T4858] netlink: 4 bytes leftover after parsing attributes in process `syz.4.201'. [ 86.778878][ T4867] netlink: 628 bytes leftover after parsing attributes in process `syz.2.205'. [ 86.833325][ T4863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.204'. [ 86.853286][ T4863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.204'. [ 86.877433][ T4863] netlink: 16 bytes leftover after parsing attributes in process `syz.3.204'. [ 86.919443][ T4863] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.928853][ T4863] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.937613][ T4863] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.946367][ T4863] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.301800][ T4885] device team_slave_0 entered promiscuous mode [ 87.309240][ T4885] device team_slave_0 left promiscuous mode [ 87.536739][ T4887] ALSA: seq fatal error: cannot create timer (-19) [ 88.315252][ T4912] loop0: detected capacity change from 0 to 2048 [ 89.512926][ T4912] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,,errors=continue. Quota mode: none. [ 89.633924][ T4929] loop2: detected capacity change from 0 to 1024 [ 89.695319][ T4929] EXT4-fs (loop2): Ignoring removed orlov option [ 89.787313][ T4937] loop1: detected capacity change from 0 to 1024 [ 89.800498][ T4929] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,auto_da_alloc,sysvgroups,norecovery,jqfmt=vfsv0,orlov,nogrpid,noauto_da_alloc,user_xattr,,errors=continue. Quota mode: none. [ 89.886875][ T26] kauditd_printk_skb: 25 callbacks suppressed [ 89.886890][ T26] audit: type=1800 audit(1757589542.648:345): pid=4929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.226" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 89.953836][ T4948] hub 9-0:1.0: USB hub found [ 89.958952][ T4948] hub 9-0:1.0: 1 port detected [ 90.012818][ T4937] EXT4-fs (loop1): failed to initialize system zone (-117) [ 90.062111][ T4937] EXT4-fs (loop1): mount failed [ 90.067517][ T26] audit: type=1326 audit(1757589542.828:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4952 comm="syz.0.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c46ebba9 code=0x7ffc0000 [ 90.099103][ T26] audit: type=1326 audit(1757589542.848:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4952 comm="syz.0.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c46ebba9 code=0x7ffc0000 [ 90.123629][ T4957] syz.0.231 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 90.198948][ T26] audit: type=1326 audit(1757589542.858:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4952 comm="syz.0.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1c46ebba9 code=0x7ffc0000 [ 90.283336][ T4964] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 90.390704][ T26] audit: type=1326 audit(1757589542.888:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4952 comm="syz.0.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c46ebba9 code=0x7ffc0000 [ 90.459000][ T4972] loop1: detected capacity change from 0 to 1024 [ 90.527253][ T26] audit: type=1326 audit(1757589542.888:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4952 comm="syz.0.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c46ebba9 code=0x7ffc0000 [ 90.617837][ T4972] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 90.659087][ T26] audit: type=1326 audit(1757589542.888:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4952 comm="syz.0.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1c46ebba9 code=0x7ffc0000 [ 90.667128][ T4972] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.851072][ T4990] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 90.851072][ T4990] program syz.1.241 not setting count and/or reply_len properly [ 90.942053][ T26] audit: type=1326 audit(1757589542.888:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4952 comm="syz.0.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c46ebba9 code=0x7ffc0000 [ 91.113349][ T26] audit: type=1326 audit(1757589542.888:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4952 comm="syz.0.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c46ebba9 code=0x7ffc0000 [ 91.178969][ T5010] loop1: detected capacity change from 0 to 512 [ 91.266240][ T26] audit: type=1326 audit(1757589542.888:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4952 comm="syz.0.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1c46ebba9 code=0x7ffc0000 [ 91.316444][ T5010] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 91.339886][ T5010] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 91.391086][ T5010] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 91.427525][ T5010] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 91.454292][ T5021] loop3: detected capacity change from 0 to 512 [ 91.535209][ T5010] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3871: comm syz.1.249: Allocating blocks 41-42 which overlap fs metadata [ 91.604143][ T5010] EXT4-fs error (device loop1): ext4_acquire_dquot:6209: comm syz.1.249: Failed to acquire dquot type 1 [ 91.669967][ T5021] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.252: bg 0: block 248: padding at end of block bitmap is not set [ 91.714101][ T5010] EXT4-fs error (device loop1): mb_free_blocks:1860: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 91.785493][ T5010] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #12: comm syz.1.249: corrupted inode contents [ 91.807895][ T5010] EXT4-fs error (device loop1): ext4_dirty_inode:6040: inode #12: comm syz.1.249: mark_inode_dirty error [ 91.847610][ T5021] EXT4-fs error (device loop3): ext4_acquire_dquot:6209: comm syz.3.252: Failed to acquire dquot type 1 [ 91.865503][ T5010] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #12: comm syz.1.249: corrupted inode contents [ 91.898295][ T5010] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #12: comm syz.1.249: mark_inode_dirty error [ 91.926545][ T5044] loop0: detected capacity change from 0 to 2048 [ 91.943048][ T5010] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #12: comm syz.1.249: corrupted inode contents [ 92.024169][ T5044] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 92.036202][ T5021] EXT4-fs (loop3): 1 truncate cleaned up [ 92.067415][ T5010] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 92.094026][ T5021] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 92.158270][ T5010] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #12: comm syz.1.249: corrupted inode contents [ 92.185062][ T5021] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.258806][ T5010] EXT4-fs error (device loop1): ext4_truncate:4273: inode #12: comm syz.1.249: mark_inode_dirty error [ 92.351270][ T5010] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 92.376035][ T5059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.261'. [ 92.397857][ T5010] EXT4-fs (loop1): 1 truncate cleaned up [ 92.450839][ T5061] smc: net device bond0 applied user defined pnetid SYZ0 [ 92.451055][ T5010] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,noblock_validity,mblk_io_submit,jqfmt=vfsold,nodelalloc,nomblk_io_submit,usrjquota=,minixdf,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 92.486239][ T5061] smc: net device bond0 erased user defined pnetid SYZ0 [ 92.616455][ T5010] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 92.997565][ T5086] loop4: detected capacity change from 0 to 512 [ 93.090387][ T5086] EXT4-fs (loop4): Unrecognized mount option "seclabel" or missing value [ 93.428460][ T5103] loop2: detected capacity change from 0 to 512 [ 93.636329][ T5103] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 93.680354][ T5103] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.746614][ T5116] sctp: [Deprecated]: syz.4.283 (pid 5116) Use of int in max_burst socket option deprecated. [ 93.746614][ T5116] Use struct sctp_assoc_value instead [ 94.073510][ T5131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.288'. [ 94.119900][ T5130] netlink: 256 bytes leftover after parsing attributes in process `syz.2.290'. [ 94.137939][ T5133] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 649 [ 94.708460][ T5158] loop3: detected capacity change from 0 to 512 [ 94.767877][ T5159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.300'. [ 94.823501][ T5163] unsupported nla_type 52263 [ 94.842619][ T5158] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 94.882297][ T5158] ext4 filesystem being mounted at /65/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.944255][ T5158] EXT4-fs error (device loop3): ext4_do_update_inode:5204: inode #2: comm syz.3.298: corrupted inode contents [ 95.031501][ T5158] EXT4-fs error (device loop3): ext4_dirty_inode:6040: inode #2: comm syz.3.298: mark_inode_dirty error [ 95.053325][ T5158] EXT4-fs error (device loop3): ext4_do_update_inode:5204: inode #2: comm syz.3.298: corrupted inode contents [ 95.080849][ T5158] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #2: comm syz.3.298: mark_inode_dirty error [ 95.177173][ T26] kauditd_printk_skb: 127 callbacks suppressed [ 95.177186][ T26] audit: type=1326 audit(1757589547.938:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5184 comm="syz.2.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441d22eba9 code=0x7ffc0000 [ 95.196831][ T4184] [ 95.207921][ T4184] ====================================================== [ 95.214939][ T4184] WARNING: possible circular locking dependency detected [ 95.221976][ T4184] syzkaller #0 Not tainted [ 95.226477][ T4184] ------------------------------------------------------ [ 95.233494][ T4184] syz-executor/4184 is trying to acquire lock: [ 95.239637][ T4184] ffff88802178a938 ((wq_completion)loop3){+.+.}-{0:0}, at: flush_workqueue+0x126/0x1380 [ 95.249374][ T4184] [ 95.249374][ T4184] but task is already holding lock: [ 95.256727][ T4184] ffff8881481d4468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 95.265510][ T4184] [ 95.265510][ T4184] which lock already depends on the new lock. [ 95.265510][ T4184] [ 95.275902][ T4184] [ 95.275902][ T4184] the existing dependency chain (in reverse order) is: [ 95.284905][ T4184] [ 95.284905][ T4184] -> #8 (&lo->lo_mutex){+.+.}-{3:3}: [ 95.292365][ T4184] __mutex_lock_common+0x1eb/0x2390 [ 95.298079][ T4184] mutex_lock_killable_nested+0x17/0x20 [ 95.304142][ T4184] lo_open+0x6a/0x100 [ 95.308638][ T4184] blkdev_get_whole+0x90/0x390 [ 95.313923][ T4184] blkdev_get_by_dev+0x2d0/0xa60 [ 95.319380][ T4184] blkdev_open+0x12d/0x2c0 [ 95.324307][ T4184] do_dentry_open+0x7ff/0xf80 [ 95.329501][ T4184] path_openat+0x2682/0x2f30 [ 95.334614][ T4184] do_filp_open+0x1b3/0x3e0 [ 95.339635][ T4184] do_sys_openat2+0x142/0x4a0 [ 95.344835][ T4184] __x64_sys_openat+0x135/0x160 [ 95.350215][ T4184] do_syscall_64+0x4c/0xa0 [ 95.355164][ T4184] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 95.361580][ T4184] [ 95.361580][ T4184] -> #7 (&disk->open_mutex){+.+.}-{3:3}: [ 95.369394][ T4184] __mutex_lock_common+0x1eb/0x2390 [ 95.375115][ T4184] mutex_lock_nested+0x17/0x20 [ 95.380391][ T4184] bd_register_pending_holders+0x33/0x310 [ 95.386624][ T4184] device_add_disk+0x5a7/0xd40 [ 95.391901][ T4184] md_alloc+0x809/0xc00 [ 95.396588][ T4184] blk_request_module+0x26e/0x290 [ 95.402137][ T4184] blkdev_get_no_open+0x38/0x1d0 [ 95.407689][ T4184] blkdev_get_by_dev+0x77/0xa60 [ 95.413082][ T4184] swsusp_check+0x9b/0x2a0 [ 95.418029][ T4184] software_resume+0xc6/0x3b0 [ 95.423271][ T4184] resume_store+0xe4/0x130 [ 95.428329][ T4184] kernfs_fop_write_iter+0x379/0x4c0 [ 95.434134][ T4184] vfs_write+0x712/0xd00 [ 95.438886][ T4184] ksys_write+0x14d/0x250 [ 95.443723][ T4184] do_syscall_64+0x4c/0xa0 [ 95.448764][ T4184] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 95.455174][ T4184] [ 95.455174][ T4184] -> #6 (disks_mutex){+.+.}-{3:3}: [ 95.462460][ T4184] __mutex_lock_common+0x1eb/0x2390 [ 95.468175][ T4184] mutex_lock_nested+0x17/0x20 [ 95.473450][ T4184] md_alloc+0x48/0xc00 [ 95.478033][ T4184] blk_request_module+0x26e/0x290 [ 95.483569][ T4184] blkdev_get_no_open+0x38/0x1d0 [ 95.489032][ T4184] blkdev_get_by_dev+0x77/0xa60 [ 95.494407][ T4184] swsusp_check+0x9b/0x2a0 [ 95.499344][ T4184] software_resume+0xc6/0x3b0 [ 95.504536][ T4184] resume_store+0xe4/0x130 [ 95.509473][ T4184] kernfs_fop_write_iter+0x379/0x4c0 [ 95.515270][ T4184] vfs_write+0x712/0xd00 [ 95.520032][ T4184] ksys_write+0x14d/0x250 [ 95.524874][ T4184] do_syscall_64+0x4c/0xa0 [ 95.530011][ T4184] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 95.536433][ T4184] [ 95.536433][ T4184] -> #5 (major_names_lock){+.+.}-{3:3}: [ 95.544168][ T4184] __mutex_lock_common+0x1eb/0x2390 [ 95.549890][ T4184] mutex_lock_nested+0x17/0x20 [ 95.555181][ T4184] blk_request_module+0x31/0x290 [ 95.560633][ T4184] blkdev_get_no_open+0x38/0x1d0 [ 95.566089][ T4184] blkdev_get_by_dev+0x77/0xa60 [ 95.571475][ T4184] swsusp_check+0x9b/0x2a0 [ 95.576411][ T4184] software_resume+0xc6/0x3b0 [ 95.581615][ T4184] resume_store+0xe4/0x130 [ 95.586561][ T4184] kernfs_fop_write_iter+0x379/0x4c0 [ 95.592363][ T4184] vfs_write+0x712/0xd00 [ 95.597128][ T4184] ksys_write+0x14d/0x250 [ 95.601979][ T4184] do_syscall_64+0x4c/0xa0 [ 95.606911][ T4184] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 95.613330][ T4184] [ 95.613330][ T4184] -> #4 (system_transition_mutex/1){+.+.}-{3:3}: [ 95.621842][ T4184] __mutex_lock_common+0x1eb/0x2390 [ 95.627569][ T4184] mutex_lock_nested+0x17/0x20 [ 95.632845][ T4184] software_resume+0x7c/0x3b0 [ 95.638040][ T4184] resume_store+0xe4/0x130 [ 95.642972][ T4184] kernfs_fop_write_iter+0x379/0x4c0 [ 95.648789][ T4184] vfs_write+0x712/0xd00 [ 95.653545][ T4184] ksys_write+0x14d/0x250 [ 95.658387][ T4184] do_syscall_64+0x4c/0xa0 [ 95.663317][ T4184] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 95.669724][ T4184] [ 95.669724][ T4184] -> #3 (&of->mutex){+.+.}-{3:3}: [ 95.676926][ T4184] __mutex_lock_common+0x1eb/0x2390 [ 95.682639][ T4184] mutex_lock_nested+0x17/0x20 [ 95.687915][ T4184] kernfs_seq_start+0x51/0x3c0 [ 95.693189][ T4184] seq_read_iter+0x3c4/0xd50 [ 95.698302][ T4184] vfs_read+0x725/0xcf0 [ 95.702966][ T4184] ksys_read+0x14d/0x250 [ 95.707716][ T4184] do_syscall_64+0x4c/0xa0 [ 95.712641][ T4184] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 95.719044][ T4184] [ 95.719044][ T4184] -> #2 (&p->lock){+.+.}-{3:3}: [ 95.726073][ T4184] __mutex_lock_common+0x1eb/0x2390 [ 95.731790][ T4184] mutex_lock_nested+0x17/0x20 [ 95.737073][ T4184] seq_read_iter+0xad/0xd50 [ 95.742086][ T4184] do_iter_readv_writev+0x497/0x600 [ 95.747792][ T4184] do_iter_read+0x20b/0x7c0 [ 95.752801][ T4184] loop_process_work+0x18dc/0x2480 [ 95.758425][ T4184] process_one_work+0x863/0x1000 [ 95.763877][ T4184] worker_thread+0xaa8/0x12a0 [ 95.769088][ T4184] kthread+0x436/0x520 [ 95.773668][ T4184] ret_from_fork+0x1f/0x30 [ 95.778595][ T4184] [ 95.778595][ T4184] -> #1 ((work_completion)(&lo->rootcg_work)){+.+.}-{0:0}: [ 95.787955][ T4184] process_one_work+0x7bf/0x1000 [ 95.793399][ T4184] worker_thread+0xaa8/0x12a0 [ 95.798585][ T4184] kthread+0x436/0x520 [ 95.803173][ T4184] ret_from_fork+0x1f/0x30 [ 95.808099][ T4184] [ 95.808099][ T4184] -> #0 ((wq_completion)loop3){+.+.}-{0:0}: [ 95.816170][ T4184] __lock_acquire+0x2c33/0x7c60 [ 95.821533][ T4184] lock_acquire+0x197/0x3f0 [ 95.826552][ T4184] flush_workqueue+0x142/0x1380 [ 95.831913][ T4184] drain_workqueue+0xcf/0x380 [ 95.837112][ T4184] destroy_workqueue+0x7b/0xb20 [ 95.842476][ T4184] __loop_clr_fd+0x234/0xb90 [ 95.847571][ T4184] blkdev_put+0x53f/0x7d0 [ 95.852414][ T4184] deactivate_locked_super+0x93/0xf0 [ 95.858207][ T4184] cleanup_mnt+0x418/0x4d0 [ 95.863132][ T4184] task_work_run+0x125/0x1a0 [ 95.868236][ T4184] exit_to_user_mode_loop+0x10f/0x130 [ 95.874129][ T4184] exit_to_user_mode_prepare+0xb1/0x140 [ 95.880186][ T4184] syscall_exit_to_user_mode+0x16/0x40 [ 95.886158][ T4184] do_syscall_64+0x58/0xa0 [ 95.891108][ T4184] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 95.897517][ T4184] [ 95.897517][ T4184] other info that might help us debug this: [ 95.897517][ T4184] [ 95.907729][ T4184] Chain exists of: [ 95.907729][ T4184] (wq_completion)loop3 --> &disk->open_mutex --> &lo->lo_mutex [ 95.907729][ T4184] [ 95.921191][ T4184] Possible unsafe locking scenario: [ 95.921191][ T4184] [ 95.928631][ T4184] CPU0 CPU1 [ 95.933978][ T4184] ---- ---- [ 95.939341][ T4184] lock(&lo->lo_mutex); [ 95.943572][ T4184] lock(&disk->open_mutex); [ 95.950665][ T4184] lock(&lo->lo_mutex); [ 95.957413][ T4184] lock((wq_completion)loop3); [ 95.962257][ T4184] [ 95.962257][ T4184] *** DEADLOCK *** [ 95.962257][ T4184] [ 95.970388][ T4184] 2 locks held by syz-executor/4184: [ 95.975660][ T4184] #0: ffff88801f8a4518 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf9/0x7d0 [ 95.984955][ T4184] #1: ffff8881481d4468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 95.994183][ T4184] [ 95.994183][ T4184] stack backtrace: [ 96.000057][ T4184] CPU: 0 PID: 4184 Comm: syz-executor Not tainted syzkaller #0 [ 96.007611][ T4184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 96.017659][ T4184] Call Trace: [ 96.020932][ T4184] [ 96.023859][ T4184] dump_stack_lvl+0x168/0x230 [ 96.028531][ T4184] ? load_image+0x3b0/0x3b0 [ 96.033028][ T4184] ? show_regs_print_info+0x20/0x20 [ 96.038216][ T4184] ? print_circular_bug+0x12b/0x1a0 [ 96.043405][ T4184] check_noncircular+0x274/0x310 [ 96.048329][ T4184] ? add_chain_block+0x940/0x940 [ 96.053255][ T4184] ? lockdep_lock+0xdc/0x1e0 [ 96.057839][ T4184] ? mark_lock+0x94/0x320 [ 96.062156][ T4184] __lock_acquire+0x2c33/0x7c60 [ 96.067005][ T4184] ? verify_lock_unused+0x140/0x140 [ 96.072199][ T4184] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 96.078304][ T4184] ? verify_lock_unused+0x140/0x140 [ 96.083496][ T4184] ? verify_lock_unused+0x140/0x140 [ 96.088689][ T4184] ? verify_lock_unused+0x140/0x140 [ 96.093878][ T4184] ? memset+0x1e/0x40 [ 96.097855][ T4184] lock_acquire+0x197/0x3f0 [ 96.102354][ T4184] ? flush_workqueue+0x126/0x1380 [ 96.107371][ T4184] ? __mutex_trylock_common+0x14f/0x250 [ 96.112903][ T4184] ? read_lock_is_recursive+0x10/0x10 [ 96.118269][ T4184] ? __init_swait_queue_head+0xa5/0x150 [ 96.123815][ T4184] flush_workqueue+0x142/0x1380 [ 96.128651][ T4184] ? flush_workqueue+0x126/0x1380 [ 96.133661][ T4184] ? __lock_acquire+0x7c60/0x7c60 [ 96.138676][ T4184] ? lock_chain_count+0x20/0x20 [ 96.143523][ T4184] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 96.148893][ T4184] ? lockdep_hardirqs_off+0x70/0x100 [ 96.154378][ T4184] ? rcu_work_rcufn+0x110/0x110 [ 96.159219][ T4184] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 96.164847][ T4184] ? finish_wait+0xc0/0x1d0 [ 96.169348][ T4184] drain_workqueue+0xcf/0x380 [ 96.174020][ T4184] destroy_workqueue+0x7b/0xb20 [ 96.178892][ T4184] __loop_clr_fd+0x234/0xb90 [ 96.183479][ T4184] ? lo_release+0x172/0x1f0 [ 96.187971][ T4184] ? lo_open+0x100/0x100 [ 96.192200][ T4184] blkdev_put+0x53f/0x7d0 [ 96.196527][ T4184] deactivate_locked_super+0x93/0xf0 [ 96.201808][ T4184] cleanup_mnt+0x418/0x4d0 [ 96.206233][ T4184] ? lockdep_hardirqs_on+0x94/0x140 [ 96.211434][ T4184] task_work_run+0x125/0x1a0 [ 96.216038][ T4184] exit_to_user_mode_loop+0x10f/0x130 [ 96.221410][ T4184] exit_to_user_mode_prepare+0xb1/0x140 [ 96.226959][ T4184] syscall_exit_to_user_mode+0x16/0x40 [ 96.232419][ T4184] do_syscall_64+0x58/0xa0 [ 96.236840][ T4184] ? clear_bhb_loop+0x30/0x80 [ 96.241525][ T4184] ? clear_bhb_loop+0x30/0x80 [ 96.246235][ T4184] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.252159][ T4184] RIP: 0033:0x7f6dddef6ed7 [ 96.256577][ T4184] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 96.276173][ T4184] RSP: 002b:00007ffc8c7fac08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 96.284582][ T4184] RAX: 0000000000000000 RBX: 00007f6dddf78c05 RCX: 00007f6dddef6ed7 [ 96.292551][ T4184] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc8c7facc0 [ 96.300516][ T4184] RBP: 00007ffc8c7facc0 R08: 0000000000000000 R09: 0000000000000000 [ 96.308483][ T4184] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc8c7fbd50 [ 96.316463][ T4184] R13: 00007f6dddf78c05 R14: 0000000000017372 R15: 00007ffc8c7fbd90 [ 96.324442][ T4184] [ 96.421018][ T26] audit: type=1326 audit(1757589547.938:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5184 comm="syz.2.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441d22eba9 code=0x7ffc0000 [ 96.458545][ T26] audit: type=1326 audit(1757589549.108:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5184 comm="syz.2.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f441d22eba9 code=0x7ffc0000 [ 96.458576][ T26] audit: type=1326 audit(1757589549.178:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5184 comm="syz.2.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441d22eba9 code=0x7ffc0000 [ 96.458604][ T26] audit: type=1326 audit(1757589549.178:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5184 comm="syz.2.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441d22eba9 code=0x7ffc0000