last executing test programs: 5.477404573s ago: executing program 2 (id=160): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) fsopen(0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) write$binfmt_elf64(r3, &(0x7f0000001c00)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x0, 0x9, 0xf, 0x0, 0x3, 0x6, 0x9, 0x1f9, 0x40, 0x21, 0x6, 0x4, 0x38, 0x1, 0xe51c, 0xffff, 0x5}, [{0x70000000, 0x456, 0x401, 0x2, 0x1, 0x9, 0x4, 0x3}], "84b4ff5e89bc7ea3326e33d6b90bbadb9ef6e98c9a72aa2704ee942472db9e1588b9c17a4f87cda88f6dd6960bffeb33e907a38ce63d576ff230ec97ed468d9c95da3bd1157a2b6f662065353965b3574a7e9c51e31d39a003ccfd7fa405d5680cddacbfa8d0ff2763b0d6a577f608e63576f413d131755b87acafdf", ['\x00', '\x00', '\x00', '\x00']}, 0x4f4) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) 5.209963794s ago: executing program 0 (id=163): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r0, 0x100000000) 5.209746154s ago: executing program 0 (id=164): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone3(0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000480)={0x0, 'dummy0\x00', {0x3}, 0x7}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) 5.052207646s ago: executing program 4 (id=165): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x9, 0x0, 0x7ffc0002}]}) msgrcv(0x0, 0x0, 0x0, 0x1, 0x3000) 4.897168079s ago: executing program 4 (id=166): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) unshare(0x2c020400) 4.714106694s ago: executing program 4 (id=169): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r3, 0x0, 0x8000000000000}, 0x18) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x80000001}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r8 = dup(r7) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r8, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) umount2(&(0x7f0000000180)='./file0\x00', 0xb) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r9, 0x5453, 0x7cb7562f2d67) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x9}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x6}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xfff}]}}]}, 0x4c}}, 0x24040084) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r12}, 0x18) 4.51382994s ago: executing program 3 (id=170): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x2}, 0x18) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) 4.408638128s ago: executing program 2 (id=171): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x3, 0x490, &(0x7f0000000580)="$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") socket$inet6(0xa, 0x3, 0x9) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x3) mlockall(0x2) shmget$private(0x0, 0x1000, 0x0, &(0x7f00008f0000/0x1000)=nil) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r4 = shmat(0x0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) shmdt(r4) 4.241662911s ago: executing program 0 (id=173): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000fcffffff00000000a7cb000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', r1}, 0x94) 4.189891465s ago: executing program 1 (id=174): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r3, 0x201, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0201}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 4.177800346s ago: executing program 3 (id=175): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSETELEM={0x14, 0xb, 0xa, 0x101, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x3c}}, 0x0) 4.121906961s ago: executing program 0 (id=176): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket$inet(0x2, 0x5, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', 0x0) 4.066895525s ago: executing program 3 (id=177): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x6, 0x0, 0x0, 0x3ff, 0x0, 0x2, 0x0, 0x42}) 4.030638318s ago: executing program 4 (id=178): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0xffa1, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0xfeff, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) 3.873752471s ago: executing program 3 (id=179): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="3eed50d0125719a810f88e3f47186fe4dae74182dfd109a2587c4797410c9b8e39bd3d9aa144d5908647c30c8db69b5c17084c9b1bfbb8680737c4f88abcdbc7d294d72ab1b344270915df9ddf5635644c351c22b29d948ac4106bce7107570beed63077cfbc98ef71699eae65d37724d995b553e7a3ade619b522313ab382caf879feb48942878e605ee3ee2872794e3abe22a3f025068b628a5d92468092a5cc649bbbd978b5772e537939432a502122235ced312dafd108c9ffeb0b38cc16da9418ca01d485a6afb5827da4df6e1121ec307de14bb32b6a977608e4576a998182dd93d592ff43e55bfdbbce23ecd501e43b3e93ef8d9d01711dff54c301e299d3801a3cffe6c9883fbd0e47124dc02569f62d48b878fcb58ce99fcffcd2a5166eff3ad93cf1d137274993d86a3b3730d63ded759f6ca88fa449e5575b15321e5a58a1f888eed7466db4976ce35f6d2efb5ad05d99a66482dc607cb5acb24d326803bd337519cc98103f59c63b5962cd72e4497d1b00817d6e09de70270a09b493c2226617b1c9ef9d506be00d6e07f14633a966f04ecca90fb8d2b963ad6f3817935bd6534fa3da1c5dc468789cbf1192f3c0bff3777f1edd2ada5d35f88f12f29e952c44445ce623509d66811c80a9e0f13ad85aba37d86ff0da4dda601d9e8acb264233bc939fb056316612cff687d5c44157be05bcc88b333ff2a40041d98f1acfe6e2231a84e09bd7a54a0442cf87ce3ee8fd8da39da1862862ae40fc3cb3055c8b70e62f243850707341f51426bb3e71c7a4fffefab060db786000618b05eb087a424a2f30f6a232ff44b605f70ceec0a8f70e37907f6e0bbba21e9d5b7ecb6d287742b75c101ba79525918c3473eae38f3c177249dfa8816661c9921f0b0c858d53ab87c8407b97950c842111002edd1d1e80b801b495da28bcd5409bc971e55dab1857e188ac9728efc8f9a4543945f86ade13b445eacecbbf848a96410ac37c57e3e9e8bc8b8fadd559d225c7468639da2b5d1208558b51e94c14faa7947a7c60e81a96bb5d194cc7289adbc02ebb4b49be1f1efc429db2f9b79b5a22919dba0c35341042c5776942c52365367c4bfc95b42be383cca7107161ded7e851d0126da33d581f1e2b08d0c061e86d31e7a83f9b51c79b4034c7deda7697034e1404c6e8e459f76c2efe64350146c7437ef808e04ca14df5f6f500264fd977272bbf8fc096774e8eb61d0963430751ac1425a073f84346b0eba368cba7fa34adc420800d4f99927280eba199f9695cf88124fafc3a2b1226d2f2ab3ea27c69a127650cf5c725b54c02bd8729033cf699ce7f030f9a3442056244da3cfb61a8126dba11377624f39eb009242152fd7b8b88de7dd86057f29bfcb7b7df0e65e7e9ac9eeaa41afa62743698bff03d5b2d51fb6bca2d92294e8e177cfa3661b26f1c040e9bed983b7bc0aa154eb9c92e4ee25091318c53113a1c23ac62d2d71504cba99041f29a4f332133292cf20abec9222a2acca57cac48fa6c0668ee5eecb494741a64d33b011dcca74696d4614c5b45a5d20983b1708d365ed3ffa60f9161972a611c22642c3c259b41f943f6d7a8b60f284d325e38fe76f0645e069ff70cae38850ccf973193b6232c987df26239a574691f7f07fffa6deae1eb0324fe546573c36f2a2c31cd442517a9b036ae6a2a491e7343864693c107a5dc2585820863c146c1ba6caa4fea9b87d567716f4c8ca1a9d2848055cd750512d3b7415d090019dc8a04a1a1d28931093cd8f00e94c407ca1fa2a5ce903d9df26e008c07cd13afa783220e1bd5e6b60645f3dbb6ecb4156fedafa2dd25498c6a99d94f0b38125ea7741b75109dcac9f80635f79f5c8a0483bb9f05a3a5bf721c7541edb252449f8b13e63c370a6146332f03ca1f1b6fe0bed984f13744bb7fa0fe322e83ddf9ffb2083e94f33604a0a199220c450dad94bf154805e7f9e4350ca2d81adf2978c87dcc8a8a7d56297ec124bfef0d28f35777205e973272c87e01070f14f5b14daa3b5104d9ff6b296c4f16ed49eb42d35e7ba3bccb7a26c33a263df88aadd596e9d9de0abbd4d449df11081f2cd62e1d8962b9b9feb25a3b8e03537d61a61c11ac22b7211d12c84e60a6abcc219e558b2513d8c530b3c7a57cdc47de545aafbb2a13c0e6c75b1b92fa241c713c83a09c92b2b61d565120372a9143415583c9596f27a663d4967cd653b08cebd6cb96c1f0dc80d57267ac9a8281d7149bde880828ee27d69a6818db58320db29d1b044eaf6ab8a5108bc522de406990b5393b1f7e7bab71bf6cf8eed1cd59c7607d662e8b313f5c4fce0f59b1027371381011b63dd5b2b09739082c0d62ffad96e30153a395234937d377c32fe7af82aca3a19d0ebc4a5c5fb5ff190f14d5695c703b571fb4bf03756635cafc6cf6267eab836c347a9d07e8089fc105346934cf3364e5be370b3c42b94bc5ae3d17a817398566a2953251eb91697d67278145df9a4b917bcca1bf211780b22f4caacfcb7604c84f943d05f6fdf8edbd258d7d8dbf84f9d99e57472c5b1c2337d749a1f345e662e2536d23c7a63bbbbf00f8b5b0a2106a0342ab27b9a10b82e82668cd49e0cbb09d7be0217645f1dda3be59c8232fa290d34791cda52aa5b5cec6339ab96a2eb3f5328cc7c0e6717c2824344547a2ed518f6b2b4e4fe5b684596aa6a9d3988fc5d5ff4cb46cec99d951b8386b10949a163af974b7543df97b4882a4ed60e927a1deb67c5f814235bef65fea79a2c712815be7403c93a3707fb90d4604ec3a6a3b0928f253f6ab6bd56c958e026c8c58172c4ac2a3efe2ecd5cea70c8313f9ac2d638bc296ba99e2ca86d2fd06b5402cdcddc3f3c9845d5ae77f6f36963b91e8f6cdccd17abe8d40ed02463af4bb0e496344f350097f1cc13313fa1e172b63556ed2b8a8121c01a5fb343ff7767821626fc49b0d6bd522e1c9bf137d5a5bccb4bc8dbb64c83a82ef6c2894f3896c9f6bf0c3764011d53eeb6db9ea9dae22d3ebcca4942d5828c0bca0d9ea37701d5a06c066ac4fe318e11e9c0d6c658ac810fb5d7836cfffe4ccbb0934e5567d74695980a156d4bf1c18861c5a29ccd349999dc20562d00e1f6c1851ae563541086438d60b975c8ceb466414ff60efa0b2dee790fd0659ffa98b92414c13d5a6825368f56c4984412205041cd8e006c7127d4395ecdffb5addf80ef938ce54a367154c4fc286d5f969325c12b13655a9a956dd3b98281f537e837669fc55d8930676e807aa8cd046e0f4583d59f86cb99f3f7a7ddde1fb39111fdec7677d2fee4b8f4814a5def5ebcc67c653384ce80eaffd880405f7edf8fd3ea049f040595df4a75e2f892e7a85e0ba351fb8d263bfff7168bb85017b360fcd2ba89346682a6ea7ccc46afbdb5ab444e3f477238b2ab503bde914d3cf1789539cde9c0621152cd97bff9f235d88a1ef4ea4309db3a05d401af7fb82784b050ef529dab4f1f003eb29710a962f7538c521e617e2f0efac36182d09985e1d725cc38c3833a53742a02f76fb2854a9e45f0febacf3bda83f11183ef5b9fef02ebcdf56d4104b175bad937d8f61964f97d673577cdcbbb48d8eb62b063ee6563b9ff053719baff871bcd83822d865b2f7ef023076425ac5cd71b1f2309de0c6f14cc9c4d3e8fad945f756a7c8a084ea1bfdf5ac6e740043e7f7bdaca06774b084ae314c2636529d4fdcd965c7f8c07156572620b827d694efdc9d2bfc5aa9391220a83765f2c71fcd48d4acaed60afb53d1013fa3b15e948ec4159f7d130ef85b594018346e99034c18738285223ea53a6b1d5cf11a607de2e19608ba03ec970a915b773824261f3fc931dd6d3b934d89f07baf14776314c3eeb8cd0537ef5736f565fbd14e520d4ab2f77ed9597b76ff91f8d1f99ebd6e473efda7accb273975a06944d1037032129992b994ca791a09b4d83980a1e494b0f97098df5f6fb6bbb02722adb11dc319c565c2c363cbd19d9fb3efb4613b62d6584cd53f7bd80e3e89304f444ce9dd1835661e3bb4de02ccf568a2a5daaf0d56898d4286c3fb62e22af62d7ac318685834467f337561dde2e0c1e2827cdffcf42c17728ee64b3ff4ccc0227590badd0bd7e448b8cca0892d6a5e0130d2ac665f47c6b28daa101c1b319869bdd39fa924d6d9ba7d72feda5f21ac78641c7d4801d41c7879721b3be4dab40d9c4a78552440101f373489cc5240b0144a9ce32691a784b6dfe971a21bb5980ff67da2d1bb90b223c9e192a39c1aeadd1f5c790811079c0b51a97105c99b6f95d71bb3ea47c33d9dcb0a53c929c44499e184a3cd722c908d3b0d157e28ffdeb2ed7192e780d96a7a2f0fd5a87bdc973e049da0caf931f26f5a21813e2e602ceb2259997e0205ce48fd9424bd6d4d75dd4301f429ee30745cd839a40dbeab4c3db2f0f10bbaea071ca41d1392385681730a3678a5f60f604dbe19cb9d7dd234337e327451b8cc65394af399432ef7fc3765d055874ebdca14e5999292d6f72f31e92bacf25db5ef8f5212952c1910de06ddbe1687a0e1837922f2228289916ed3aeb7b9cc24da3ae47139e371930afa6d3573df6732c26c0c7ae06d9cedfa77160711bcb06e6553338deae4c5731cf53cc154113096d02f3036d7d9edfcdc331e4bb860c5208489212e904eab70e7f860b0379895cbdecbf7a0b7a25e5b853c7dbe08a4e296a30afec8cf5a9f6ea4aef32a508655d539a770b21e660c9ee1d7688c56abeb7cf1afccc8d59780cf26312589e0c8e1bc00ad7b1325cd9a5dd69246e0b33407c381ea09265154aec297e4ccdf9785a1042a83e77c13d4ce4360782f2428f9916b5cd123b089eb683d30c1e895b9944aa905a1a5b52301d8cc5e4741834ead6ebdb5dc05c9c49c5e883e99d40b9838037beaf876534d747856103e59caf6266fbbe760b6ef83d004634b74f14f8eb4aef93c4cc9cbbd78d83d532c70feef51ea3f170b25d81a6a9b074bfca7e9b3771bf83517e0dd9d0600f70b86b20f61fe36076f8bada334b2390fa954973bc901619a3cfd039349cb328625f495ab288dbdd6dbfd022c2a83f59e0b998619a12e35891b5ae9e83a71765507b4a571cd2241e5885c705244c1022688bef7c5065fbcf219fc01753adb611b3fbc09403dcb10a4f99d788667eff75fa27074ca8481a633530e26163ccf7dada049d23e717e067b6fa5b2f652bc50abda9e7ccdc5f2f3c35ecc2c4431c819c9691be4422e379750774e9f39dae06f26423c8a4278789c9f3111b43f6dd25b0ad47c4cc5fda3f3ed82079c9366e0adced883488f429c1d7e1b351fd0bb204dd7977ef224c4df6d7a5f7697bc6500a7d03a8a914154779fa7092bf1be6bad4092367ce5d295a5d5d0e7c469f372ca2011d612637025e89f178ae9ada0c5b73bcb7d7c034ff595263cd4216e3c76ba5f3d81932a088a90bf8043e877e299c670ef1622a098d5519d9adc4ee7d4cd00e5934a4375fa83fdb81214b892482b31bdde59a70aaf25cb7f417c3a2a91c4e54b48149f6c41d9d396ee6ff13e3028c64a7c9b1f2e7c6e67184a3d52d6f570db3d225c947423c4c6533f22df57d15c5e5a3183422bd378b06fe4732a9401dcb19840fb8fa5c50a0ff497fef362c507753e46b8881d3e767f3b1d893a3805941c94f2efa05ce34b9ea81d716984af6834230d4707a87089d40779503ee6a9bb245d7d997f14acb80e89731c042bbbbe3dcd05177b0ee0eec23455830ef5b65aca357f2b0b887e0b9821c0", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r3, 0x0, 0x200000000000006}, 0x18) r4 = dup2(r1, r0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r4, &(0x7f0000008800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008480)=[{&(0x7f00000062c0)="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", 0x5dd}], 0x1}}], 0x6, 0x20004095) 3.873482531s ago: executing program 0 (id=180): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "bc4c4244873398a4dbaf40fcee141d15bb69638f747e05bea3129ab81b02447352b404f793053d889e68b293719907746b342a8c2048fa4cda276a840c397fcd"}, 0x48, 0xfffffffffffffffe) keyctl$setperm(0x5, 0x0, 0x30925) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x6}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@i_version}]}, 0x6, 0x5fd, &(0x7f0000000c00)="$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") r4 = socket$unix(0x1, 0x5, 0x0) io_setup(0x6, &(0x7f0000004680)=0x0) r6 = eventfd2(0x7ff, 0x801) io_submit(r5, 0x2, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x499, r4, 0x0, 0x0, 0x62, 0x0, 0x1, r6}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x6, r4, &(0x7f0000000180)="19e5", 0x2, 0x7fffffffffffffff}]) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) r8 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000400)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x0, 0x60, 0x0, 0x0, 0xc, 0x0, 0x3f, 0x5, 0x5f8480, 0x0}) unshare(0x62040200) 3.249672111s ago: executing program 1 (id=181): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x5c}}, 0x0) 3.191603515s ago: executing program 4 (id=182): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r3, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0xc, r3, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 3.113809042s ago: executing program 3 (id=183): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone3(0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000480)={0x0, 'dummy0\x00', {0x3}, 0x7}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) 3.045308347s ago: executing program 2 (id=184): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006114650000000000047000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000300)) r3 = inotify_init() readv(r3, &(0x7f0000000140)=[{&(0x7f0000000340)=""/263, 0x107}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) fcntl$setstatus(r3, 0x4, 0x42800) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) write(r5, 0x0, 0x0) 1.244086031s ago: executing program 1 (id=185): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f00000068c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd6007000000303a00fe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) syz_io_uring_setup(0x3ba9, &(0x7f0000000000)={0x0, 0x492, 0x8000, 0x0, 0x155}, &(0x7f0000000140), 0x0) 649.894568ms ago: executing program 1 (id=186): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) memfd_create(&(0x7f0000000140)='/\x8a%\x80\xf3\xae\xba\x04\xd7\xc3\xcd]vS\xb1l{J\xb0<\x01\xa9h\xa7\x15\x87\xdb*i+G\x8bxQ \xa0y\xd5\xec\xd9e\rQ\x11\xfd\xc8\xac\x93\'u\xfe\x04H\xa4gC\\8\xc2\x82\xbaL\x86{\xf7E\xc6\xa0k\xe9\xd4\xa3F\xb2Dg\x16\xcb\xdfl\xf7\xea\x83\xa5\x1fkik\xd8\xcc\xb6\xda{I\x9f8\xa1\xbe0\xee\xaf\x9b\xbc]\x17\x94\xca6\xeb\x88\a\xf6}\xe1\x92\xbc\xd9r\xd4A\x1e,\'5[6b6\x84XLX\x93\xae}\xa6\xc0\xa5\xbb\x97A\xb7\t\x90\xef5\x87\x1e\xfcHu7\x13<\v\x12\x92\xbb\x1f\x19\xba\x84\xdeY~\r#\'vs2\xe6\x1dJ\xd7\b\xfd\xad91\xe2\f\x91\x94M\t(\x1dP+\xba\xf8\x9b\xa2\xcc\x126\xb4\xa4Y\x8ajg\x9c\\\x94pN\x9e\xed{\x05I\xc8\x80\xf3\xec\xc85k\xa2\xd67z\x80:\xcc\x025}\x82\xbaP\xa3&\x1b\xd1F\x85\xa3\xa0\xd2\xc7m\x88\xad\x98\'\xd7\xe7\xbf\x15\x02\x00\x00\x00\x00\x00\x00l\x12\xa8\xee\xea\xea\xb0$\xad\xc5\xa3\xc99\x95\x04\xbe\xa4\x15`U&\xa5?\x02\xbaeD\xebAVg\xc66\x832R', 0x6) 502.16737ms ago: executing program 1 (id=187): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f72"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000000906010200000c0000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe8000000000000000000000000000bb060004404e1f00000500070088"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 338.995683ms ago: executing program 4 (id=188): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}]}], {0x52}}, 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) 220.734792ms ago: executing program 2 (id=189): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x66) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r1, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20008024) 219.602862ms ago: executing program 3 (id=190): syz_open_dev$vcsn(&(0x7f0000000180), 0x0, 0x26642) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c04, &(0x7f0000000340), 0x1, 0x779, &(0x7f0000001900)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) 138.463219ms ago: executing program 2 (id=191): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 108.977121ms ago: executing program 0 (id=192): r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x29, 0x3e, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r2, {0x6, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x50) pidfd_getfd(0xffffffffffffffff, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x5, 0xb4, &(0x7f0000000580)=""/180, 0x1f00, 0x3b, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x0) 41.766807ms ago: executing program 1 (id=193): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000040) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) 0s ago: executing program 2 (id=194): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x3, 0x490, &(0x7f0000000580)="$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") socket$inet6(0xa, 0x3, 0x9) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) mlockall(0x2) shmget$private(0x0, 0x1000, 0x0, &(0x7f00008f0000/0x1000)=nil) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) r3 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r4 = shmat(r3, &(0x7f0000ff1000/0x3000)=nil, 0x400c) shmdt(r4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.229' (ED25519) to the list of known hosts. [ 50.536133][ T4171] cgroup: Unknown subsys name 'net' [ 50.695005][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.832665][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 53.601222][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 53.664355][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 53.744689][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 53.819443][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.826796][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.836115][ T4182] device bridge_slave_0 entered promiscuous mode [ 53.846577][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.853769][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.862246][ T4182] device bridge_slave_1 entered promiscuous mode [ 53.876521][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.883959][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.892090][ T4183] device bridge_slave_0 entered promiscuous mode [ 53.903131][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.910360][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.918378][ T4183] device bridge_slave_1 entered promiscuous mode [ 53.933180][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 53.946662][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 53.980133][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.998770][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.023775][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.041201][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.068158][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.075438][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.083311][ T4186] device bridge_slave_0 entered promiscuous mode [ 54.108624][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.115826][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.124469][ T4186] device bridge_slave_1 entered promiscuous mode [ 54.150277][ T4182] team0: Port device team_slave_0 added [ 54.163089][ T4183] team0: Port device team_slave_0 added [ 54.187398][ T4182] team0: Port device team_slave_1 added [ 54.208350][ T4183] team0: Port device team_slave_1 added [ 54.236713][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.254529][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.261822][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.269359][ T4189] device bridge_slave_0 entered promiscuous mode [ 54.277295][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.284615][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.292948][ T4192] device bridge_slave_0 entered promiscuous mode [ 54.300416][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.307358][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.333328][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.346819][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.356394][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.363804][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.389967][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.406471][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.416134][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.424145][ T4189] device bridge_slave_1 entered promiscuous mode [ 54.431750][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.438825][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.446703][ T4192] device bridge_slave_1 entered promiscuous mode [ 54.463549][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.470783][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.496794][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.528664][ T4186] team0: Port device team_slave_0 added [ 54.535695][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.542832][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.568914][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.590974][ T4186] team0: Port device team_slave_1 added [ 54.598372][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.612963][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.642511][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.661462][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.706480][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.713703][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.739946][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.753389][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.760421][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.791680][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.805125][ T4182] device hsr_slave_0 entered promiscuous mode [ 54.812196][ T4182] device hsr_slave_1 entered promiscuous mode [ 54.821239][ T4192] team0: Port device team_slave_0 added [ 54.855349][ T4192] team0: Port device team_slave_1 added [ 54.863066][ T4183] device hsr_slave_0 entered promiscuous mode [ 54.869648][ T4183] device hsr_slave_1 entered promiscuous mode [ 54.877318][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.885198][ T4183] Cannot create hsr debugfs directory [ 54.892909][ T4189] team0: Port device team_slave_0 added [ 54.916763][ T4189] team0: Port device team_slave_1 added [ 54.974012][ T4186] device hsr_slave_0 entered promiscuous mode [ 54.981065][ T4186] device hsr_slave_1 entered promiscuous mode [ 54.987571][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.995827][ T4186] Cannot create hsr debugfs directory [ 55.002029][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.009092][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.035041][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.046413][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.053652][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.080632][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.095296][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.102438][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.128729][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.156213][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.163329][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.189400][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.261494][ T4189] device hsr_slave_0 entered promiscuous mode [ 55.268039][ T4189] device hsr_slave_1 entered promiscuous mode [ 55.274694][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.282694][ T4189] Cannot create hsr debugfs directory [ 55.301609][ T4192] device hsr_slave_0 entered promiscuous mode [ 55.308474][ T4192] device hsr_slave_1 entered promiscuous mode [ 55.315394][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.323013][ T4192] Cannot create hsr debugfs directory [ 55.331128][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 55.331128][ T1108] Bluetooth: hci1: command 0x0409 tx timeout [ 55.331569][ T1108] Bluetooth: hci4: command 0x0409 tx timeout [ 55.350044][ T1108] Bluetooth: hci2: command 0x0409 tx timeout [ 55.356170][ T1108] Bluetooth: hci0: command 0x0409 tx timeout [ 55.589707][ T4182] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.600447][ T4182] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.614010][ T4182] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.622512][ T4182] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.678650][ T4183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.687220][ T4183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.707090][ T4183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.723933][ T4183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.762800][ T4186] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.774791][ T4186] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.794089][ T4186] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.809832][ T4186] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.853896][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.872252][ T4192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.899417][ T4192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.909985][ T4192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.922739][ T4192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.938910][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.946436][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.956360][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.019789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.028919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.037938][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.045158][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.054979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.087094][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.094174][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.105772][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.114626][ T1260] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.121840][ T1260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.131278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.145013][ T4189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.176345][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.185288][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.195096][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.206315][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.214311][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.223482][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.232067][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.240899][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.248859][ T4189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.259130][ T4189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.268597][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.289534][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.298281][ T4189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.313567][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.322307][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.332636][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.341670][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.349823][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.359116][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.368125][ T569] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.375206][ T569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.382994][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.394000][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.402834][ T569] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.409948][ T569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.422869][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.441801][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.449717][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.465500][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.493221][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.508633][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.518157][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.544296][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.571587][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.580712][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.589076][ T569] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.596142][ T569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.607625][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.616882][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.625554][ T569] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.632642][ T569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.640295][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.648683][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.657912][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.666129][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.684617][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.695966][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.705201][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.722469][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.737056][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.745109][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.754301][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.764108][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.772663][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.811168][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.824013][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.833689][ T1260] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.840914][ T1260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.848566][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.857526][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.866425][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.875452][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.884138][ T1260] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.891282][ T1260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.899093][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.907682][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.916175][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.925032][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.934569][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.942846][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.950776][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.958185][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.967110][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.981511][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.989447][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.998679][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.009283][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.027967][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.050582][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.059078][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.079911][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.091723][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.107285][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.119234][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.133931][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.155925][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.166347][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.181536][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.190025][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.208127][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.222473][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.246773][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.275891][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.286974][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.308871][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.329648][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.342358][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.359521][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.386084][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.410870][ T4173] Bluetooth: hci0: command 0x041b tx timeout [ 57.411543][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.420584][ T4173] Bluetooth: hci2: command 0x041b tx timeout [ 57.433579][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.440506][ T4173] Bluetooth: hci4: command 0x041b tx timeout [ 57.440703][ T4269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.448518][ T4173] Bluetooth: hci3: command 0x041b tx timeout [ 57.460441][ T4173] Bluetooth: hci1: command 0x041b tx timeout [ 57.476278][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.493321][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.504111][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.540673][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.547792][ T4269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.615239][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.627794][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.637693][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.647601][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.667681][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.677467][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.686430][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.694218][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.703463][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.711611][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.719648][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.735593][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.743818][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.751761][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.761713][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.769976][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.779480][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.787925][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.796358][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.805071][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.818641][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.833676][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.845994][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.857651][ T4186] device veth0_vlan entered promiscuous mode [ 57.870177][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.878527][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.926546][ T4186] device veth1_vlan entered promiscuous mode [ 57.940614][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.949380][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.959730][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.971118][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.980886][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.989692][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.999546][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.009554][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.019657][ T4182] device veth0_vlan entered promiscuous mode [ 58.039558][ T4183] device veth0_vlan entered promiscuous mode [ 58.048365][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.057864][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.066992][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.076085][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.107547][ T4183] device veth1_vlan entered promiscuous mode [ 58.143807][ T4182] device veth1_vlan entered promiscuous mode [ 58.159579][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.168304][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.176557][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.185239][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.210838][ T4186] device veth0_macvtap entered promiscuous mode [ 58.232593][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.242013][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.250078][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.259218][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.269288][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.277690][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.286550][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.296156][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.304332][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.323098][ T4186] device veth1_macvtap entered promiscuous mode [ 58.337787][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.347650][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.357798][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.371430][ T4192] device veth0_vlan entered promiscuous mode [ 58.378009][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.387530][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.407765][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.417645][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.427550][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.438339][ T4182] device veth0_macvtap entered promiscuous mode [ 58.449518][ T4183] device veth0_macvtap entered promiscuous mode [ 58.468001][ T4182] device veth1_macvtap entered promiscuous mode [ 58.479570][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.487458][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.496285][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.504629][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.512965][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.521712][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.533605][ T4192] device veth1_vlan entered promiscuous mode [ 58.541236][ T4183] device veth1_macvtap entered promiscuous mode [ 58.555925][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.566715][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.581600][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.592035][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.628202][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.639719][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.650096][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.661706][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.672895][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.681152][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.689190][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.701715][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.709813][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.719152][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.728208][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.737150][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.746345][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.755143][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.763910][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.773692][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.784434][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.795602][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.808190][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.828004][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.839118][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.849366][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.863829][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.875044][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.883774][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.892537][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.902322][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.911506][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.922976][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.932146][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.955188][ T4189] device veth0_vlan entered promiscuous mode [ 58.965072][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.974788][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.983861][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.992665][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.007603][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.016965][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.029362][ T4182] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.038307][ T4182] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.047958][ T4182] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.057448][ T4182] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.071095][ T4192] device veth0_macvtap entered promiscuous mode [ 59.090479][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.098784][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.107051][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.115992][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.125094][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.136176][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.145119][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.162694][ T4192] device veth1_macvtap entered promiscuous mode [ 59.174866][ T4189] device veth1_vlan entered promiscuous mode [ 59.245844][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.272756][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.282834][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.293451][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.303288][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.313930][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.324855][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.365660][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.376863][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.385444][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.394891][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.403686][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.419951][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.431067][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.442209][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.452842][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.462687][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.473335][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.485035][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.492661][ T4254] Bluetooth: hci1: command 0x040f tx timeout [ 59.508782][ T4254] Bluetooth: hci3: command 0x040f tx timeout [ 59.516603][ T4254] Bluetooth: hci4: command 0x040f tx timeout [ 59.523119][ T4254] Bluetooth: hci2: command 0x040f tx timeout [ 59.529151][ T4254] Bluetooth: hci0: command 0x040f tx timeout [ 59.538446][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.548199][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.557309][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.565828][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.588127][ T4269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.591117][ T4189] device veth0_macvtap entered promiscuous mode [ 59.607326][ T4269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.625155][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.637562][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.646602][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.656028][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.666974][ T4189] device veth1_macvtap entered promiscuous mode [ 59.690339][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.698530][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.711296][ T4269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.714446][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.722218][ T4269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.741120][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.793172][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.804334][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.814860][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.825543][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.835610][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.846294][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.856304][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.867031][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.878485][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.889003][ T569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.900319][ T4277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.905560][ T569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.908385][ T4277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.928829][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.937971][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.947101][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.957683][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.973962][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.982471][ T4269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.993241][ T4269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.994431][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.010658][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.021702][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.031637][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.042214][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.053210][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.064097][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.076492][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.091717][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.099753][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.114291][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.154918][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.172616][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.185736][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.194523][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.262166][ T4269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.301529][ T4299] loop3: detected capacity change from 0 to 512 [ 60.322864][ T4277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.333487][ T4269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.339490][ T569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.355340][ T4277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.374749][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.385444][ T569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.396510][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.410381][ T4299] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 60.437336][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.447754][ T4299] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 60.500277][ T4299] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 60.538661][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.566474][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.608001][ T4299] EXT4-fs (loop3): 1 truncate cleaned up [ 60.650505][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.655312][ T4301] hub 6-0:1.0: USB hub found [ 60.662953][ T4299] EXT4-fs (loop3): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,nombcache,debug_want_extra_isize=0x0000000000000004,mblk_io_submit,resuid=0x0000000000000000,norecovery,,errors=continue. Quota mode: none. [ 60.663083][ T4301] hub 6-0:1.0: 1 port detected [ 60.736269][ T26] audit: type=1326 audit(1754968519.263:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4307 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a4385be9 code=0x7ffc0000 [ 60.738507][ T569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.800858][ T26] audit: type=1326 audit(1754968519.303:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4307 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a4385be9 code=0x7ffc0000 [ 60.831846][ T4308] syz.1.2[4308] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.832004][ T4308] syz.1.2[4308] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.858904][ T4310] loop2: detected capacity change from 0 to 1024 [ 60.901886][ T26] audit: type=1326 audit(1754968519.323:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4307 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3a4385be9 code=0x7ffc0000 [ 60.906532][ T569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.959195][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.981304][ T4310] ======================================================= [ 60.981304][ T4310] WARNING: The mand mount option has been deprecated and [ 60.981304][ T4310] and is ignored by this kernel. Remove the mand [ 60.981304][ T4310] option from the mount to silence this warning. [ 60.981304][ T4310] ======================================================= [ 61.061898][ T26] audit: type=1326 audit(1754968519.323:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4307 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a4385be9 code=0x7ffc0000 [ 61.143639][ T26] audit: type=1326 audit(1754968519.323:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4307 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a4385be9 code=0x7ffc0000 [ 61.218054][ T26] audit: type=1326 audit(1754968519.323:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4307 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3a4385be9 code=0x7ffc0000 [ 61.282164][ T26] audit: type=1326 audit(1754968519.323:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4307 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a4385be9 code=0x7ffc0000 [ 61.392209][ T4310] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 61.556116][ T26] audit: type=1326 audit(1754968519.323:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4307 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a4385be9 code=0x7ffc0000 [ 61.571323][ T4254] Bluetooth: hci0: command 0x0419 tx timeout [ 61.615654][ T4254] Bluetooth: hci2: command 0x0419 tx timeout [ 61.626269][ T4315] syz.1.9[4315] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.626369][ T4315] syz.1.9[4315] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.646033][ T4254] Bluetooth: hci4: command 0x0419 tx timeout [ 61.647100][ T26] audit: type=1326 audit(1754968519.323:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4307 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3a4385be9 code=0x7ffc0000 [ 61.674502][ T4254] Bluetooth: hci3: command 0x0419 tx timeout [ 61.718896][ T4254] Bluetooth: hci1: command 0x0419 tx timeout [ 61.993798][ T4329] loop3: detected capacity change from 0 to 4096 [ 62.060636][ T26] audit: type=1326 audit(1754968519.323:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4307 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a4385be9 code=0x7ffc0000 [ 62.235858][ T4329] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 63.443388][ T4322] infiniband syz1: set active [ 63.707558][ T4322] infiniband syz1: added syz_tun [ 64.613723][ T4322] infiniband syz1: Couldn't open port 1 [ 64.802510][ T4322] RDS/IB: syz1: added [ 64.808469][ T4322] smc: adding ib device syz1 with port count 1 [ 64.870681][ T4322] smc: ib device syz1 port 1 has pnetid [ 65.058335][ T4349] loop2: detected capacity change from 0 to 8192 [ 66.700168][ C0] sched: RT throttling activated [ 66.906357][ T1111] cfg80211: failed to load regulatory.db [ 67.345775][ T4372] netlink: 28 bytes leftover after parsing attributes in process `syz.2.23'. [ 68.260334][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 68.260349][ T26] audit: type=1326 audit(1754968526.783:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4378 comm="syz.1.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a4385be9 code=0x7ffc0000 [ 68.359245][ T4379] loop2: detected capacity change from 0 to 1024 [ 68.367218][ T26] audit: type=1326 audit(1754968526.783:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4378 comm="syz.1.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a4385be9 code=0x7ffc0000 [ 68.403783][ T26] audit: type=1326 audit(1754968526.853:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4378 comm="syz.1.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff3a4385be9 code=0x7ffc0000 [ 68.403843][ T26] audit: type=1326 audit(1754968526.853:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4378 comm="syz.1.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a4385be9 code=0x7ffc0000 [ 68.403895][ T26] audit: type=1326 audit(1754968526.853:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4378 comm="syz.1.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a4385be9 code=0x7ffc0000 [ 68.403948][ T26] audit: type=1326 audit(1754968526.853:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4378 comm="syz.1.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7ff3a4385be9 code=0x7ffc0000 [ 68.404010][ T26] audit: type=1326 audit(1754968526.863:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4378 comm="syz.1.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a4385be9 code=0x7ffc0000 [ 68.404063][ T26] audit: type=1326 audit(1754968526.863:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4378 comm="syz.1.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a4385be9 code=0x7ffc0000 [ 68.404115][ T26] audit: type=1326 audit(1754968526.863:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4378 comm="syz.1.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7ff3a4385be9 code=0x7ffc0000 [ 68.404168][ T26] audit: type=1326 audit(1754968526.863:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4378 comm="syz.1.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a4385be9 code=0x7ffc0000 [ 68.502450][ T4379] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,user_xattr,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,nodelalloc,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 68.563582][ T4390] loop3: detected capacity change from 0 to 128 [ 71.130941][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.131233][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.228056][ T4390] attempt to access beyond end of device [ 71.228056][ T4390] loop3: rw=2049, want=1041, limit=128 [ 71.315977][ T4408] attempt to access beyond end of device [ 71.315977][ T4408] loop3: rw=2049, want=169, limit=128 [ 71.318763][ T4407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.32'. [ 71.344449][ T4408] attempt to access beyond end of device [ 71.344449][ T4408] loop3: rw=0, want=129, limit=128 [ 71.372472][ T4407] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.380593][ T4404] loop2: detected capacity change from 0 to 1024 [ 71.381709][ T4407] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.397568][ T4407] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.406360][ T4407] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.425798][ T4404] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 71.426579][ T4408] attempt to access beyond end of device [ 71.426579][ T4408] loop3: rw=0, want=241, limit=128 [ 71.440213][ T4404] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 71.453546][ T4407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.32'. [ 71.464643][ T4407] Zero length message leads to an empty skb [ 71.536700][ T4404] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 71.642012][ T4404] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,nolazytime,abort,errors=continue,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,nobarrier,,errors=continue. Quota mode: writeback. [ 71.992602][ T4417] loop3: detected capacity change from 0 to 128 [ 72.058875][ T4419] loop1: detected capacity change from 0 to 2048 [ 72.070081][ T4413] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.34'. [ 72.138081][ T4419] loop1: p1 < > p4 [ 72.157302][ T4419] loop1: p4 size 8388608 extends beyond EOD, truncated [ 72.288635][ T4421] loop2: detected capacity change from 0 to 8192 [ 74.379992][ T4439] loop2: detected capacity change from 0 to 512 [ 74.423903][ T4436] loop3: detected capacity change from 0 to 2048 [ 74.430560][ T4440] loop1: detected capacity change from 0 to 512 [ 74.651474][ T4440] EXT4-fs (loop1): Ignoring removed bh option [ 74.679521][ T4440] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 74.716396][ T4439] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 74.725834][ T4436] EXT4-fs (loop3): failed to initialize system zone (-117) [ 74.783976][ T4436] EXT4-fs (loop3): mount failed [ 74.849810][ T4439] EXT4-fs (loop2): orphan cleanup on readonly fs [ 75.061315][ T4440] EXT4-fs (loop1): 1 truncate cleaned up [ 75.265419][ T4440] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 75.434705][ T4439] EXT4-fs error (device loop2): ext4_do_update_inode:5204: inode #16: comm syz.2.40: corrupted inode contents [ 75.589668][ T4439] EXT4-fs (loop2): Remounting filesystem read-only [ 75.670431][ T4439] EXT4-fs error (device loop2): ext4_dirty_inode:6040: inode #16: comm syz.2.40: mark_inode_dirty error [ 75.717649][ T4457] loop0: detected capacity change from 0 to 8192 [ 75.754529][ T4459] loop3: detected capacity change from 0 to 512 [ 75.760924][ T4439] EXT4-fs (loop2): Remounting filesystem read-only [ 75.771956][ T4439] EXT4-fs error (device loop2): ext4_do_update_inode:5204: inode #16: comm syz.2.40: corrupted inode contents [ 75.825637][ T4459] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 75.839281][ T4439] EXT4-fs (loop2): Remounting filesystem read-only [ 75.849414][ T4439] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.40: mark_inode_dirty error [ 75.877442][ T4439] EXT4-fs (loop2): Remounting filesystem read-only [ 75.899370][ T4459] EXT4-fs (loop3): 1 truncate cleaned up [ 75.934913][ T4439] EXT4-fs error (device loop2): ext4_do_update_inode:5204: inode #16: comm syz.2.40: corrupted inode contents [ 75.949694][ T4459] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000ffd,nolazytime,jqfmt=vfsold,errors=remount-ro,minixdf,errors=remount-ro,. Quota mode: none. [ 76.000057][ T4439] EXT4-fs (loop2): Remounting filesystem read-only [ 76.007504][ T4439] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 76.025842][ T4439] EXT4-fs (loop2): Remounting filesystem read-only [ 76.075984][ T4439] EXT4-fs error (device loop2): ext4_do_update_inode:5204: inode #16: comm syz.2.40: corrupted inode contents [ 76.100716][ T26] kauditd_printk_skb: 102 callbacks suppressed [ 76.100742][ T26] audit: type=1800 audit(1754968534.633:130): pid=4459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.47" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 76.125861][ T4439] EXT4-fs (loop2): Remounting filesystem read-only [ 76.169484][ T4439] EXT4-fs error (device loop2): ext4_truncate:4273: inode #16: comm syz.2.40: mark_inode_dirty error [ 76.183210][ T4439] EXT4-fs (loop2): Remounting filesystem read-only [ 76.189760][ T4439] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 76.241596][ T4439] EXT4-fs (loop2): Remounting filesystem read-only [ 76.271698][ T4439] EXT4-fs (loop2): 1 truncate cleaned up [ 76.368382][ T4469] loop1: detected capacity change from 0 to 764 [ 76.520427][ T4439] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,discard,. Quota mode: writeback. [ 77.311700][ T4475] netlink: 'syz.2.52': attribute type 21 has an invalid length. [ 77.320651][ T4476] netlink: 16 bytes leftover after parsing attributes in process `syz.3.53'. [ 77.359062][ T4475] netlink: 132 bytes leftover after parsing attributes in process `syz.2.52'. [ 77.401832][ T4475] netlink: 'syz.2.52': attribute type 1 has an invalid length. [ 77.658779][ T4486] loop2: detected capacity change from 0 to 512 [ 78.324499][ T4486] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 78.638897][ T4486] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.256531][ T4511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.63'. [ 80.507988][ T4522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.68'. [ 80.580267][ T4529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.70'. [ 80.647159][ T4529] netlink: 12 bytes leftover after parsing attributes in process `syz.3.70'. [ 80.753352][ T26] audit: type=1326 audit(1754968539.283:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4524 comm="syz.2.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe082c8dbe9 code=0x7ffc0000 [ 81.210590][ T4532] loop0: detected capacity change from 0 to 1024 [ 81.463106][ T4537] loop2: detected capacity change from 0 to 512 [ 81.516561][ T26] audit: type=1326 audit(1754968539.303:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4524 comm="syz.2.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe082c8dbe9 code=0x7ffc0000 [ 81.609903][ T26] audit: type=1326 audit(1754968539.303:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4524 comm="syz.2.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe082c8dbe9 code=0x7ffc0000 [ 81.634733][ T26] audit: type=1326 audit(1754968539.303:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4524 comm="syz.2.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe082c8dbe9 code=0x7ffc0000 [ 81.657433][ T26] audit: type=1326 audit(1754968539.303:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4524 comm="syz.2.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe082c8dbe9 code=0x7ffc0000 [ 81.680368][ T26] audit: type=1326 audit(1754968539.303:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4524 comm="syz.2.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe082c8dbe9 code=0x7ffc0000 [ 81.710987][ T4537] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 81.719973][ T4545] loop3: detected capacity change from 0 to 512 [ 81.728043][ T26] audit: type=1326 audit(1754968539.303:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4524 comm="syz.2.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe082c8dbe9 code=0x7ffc0000 [ 81.736785][ T4532] EXT4-fs (loop0): Ignoring removed nobh option [ 81.777800][ T4532] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 81.797683][ T26] audit: type=1326 audit(1754968539.303:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4524 comm="syz.2.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe082c8dbe9 code=0x7ffc0000 [ 81.832803][ T26] audit: type=1326 audit(1754968539.303:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4524 comm="syz.2.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe082c8dbe9 code=0x7ffc0000 [ 81.867708][ T26] audit: type=1326 audit(1754968539.303:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4524 comm="syz.2.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe082c8dbe9 code=0x7ffc0000 [ 81.905728][ T4532] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=continue,data_err=abort,init_itable,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b0,noblock_validity,grpquota,nobh,user_xattr,inode_readahead_blks=0x0000000000000004,dioread_nolock,,errors=continue. Quota mode: writeback. [ 81.954775][ T26] audit: type=1326 audit(1754968539.303:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4524 comm="syz.2.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe082c8dbe9 code=0x7ffc0000 [ 81.994312][ T4546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.76'. [ 82.025113][ T4552] cgroup: Need name or subsystem set [ 82.126252][ T4545] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 82.159464][ T4537] EXT4-fs error (device loop2): ext4_acquire_dquot:6207: comm syz.2.67: Failed to acquire dquot type 1 [ 82.201487][ T4545] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.249590][ T4537] EXT4-fs (loop2): 1 truncate cleaned up [ 82.293600][ T4537] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 82.318760][ T4532] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3876: comm syz.0.72: Allocating blocks 497-513 which overlap fs metadata [ 82.452695][ T4532] EXT4-fs (loop0): pa ffff8880741258c0: logic 208, phys. 465, len 3 [ 82.461367][ T4532] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 83.373931][ T4564] loop0: detected capacity change from 0 to 512 [ 83.416197][ T4567] netlink: 'syz.2.82': attribute type 10 has an invalid length. [ 83.434206][ T4563] loop4: detected capacity change from 0 to 4096 [ 83.448969][ T4564] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 83.522634][ T4564] EXT4-fs (loop0): 1 truncate cleaned up [ 83.528677][ T4564] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000358,resuid=0x0000000000000000,stripe=0x0000000000000009,,errors=continue. Quota mode: none. [ 83.537189][ T4567] team0: Device hsr_slave_0 failed to register rx_handler [ 83.639540][ T4563] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 85.071666][ T4594] netlink: 60 bytes leftover after parsing attributes in process `syz.4.88'. [ 85.359210][ T4605] loop2: detected capacity change from 0 to 512 [ 85.545751][ T4605] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 85.586196][ T4605] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.694336][ T4608] syz.0.93 (4608) used greatest stack depth: 18440 bytes left [ 85.773541][ T4623] loop4: detected capacity change from 0 to 1024 [ 86.245868][ T4623] EXT4-fs (loop4): Ignoring removed oldalloc option [ 86.304134][ T4623] EXT4-fs (loop4): Ignoring removed orlov option [ 86.367720][ T4623] EXT4-fs (loop4): mounted filesystem without journal. Opts: nolazytime,auto_da_alloc,oldalloc,norecovery,jqfmt=vfsv0,orlov,nogrpid,noauto_da_alloc,user_xattr,,errors=continue. Quota mode: none. [ 86.940494][ T4648] loop2: detected capacity change from 0 to 1024 [ 87.231701][ T4648] EXT4-fs (loop2): Ignoring removed bh option [ 87.430896][ T4648] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,auto_da_alloc,abort,user_xattr,bh,errors=remount-ro,. Quota mode: none. [ 87.908975][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 87.908991][ T26] audit: type=1326 audit(1754968546.433:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4655 comm="syz.4.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d062d0be9 code=0x7ffc0000 [ 88.022100][ T4661] loop3: detected capacity change from 0 to 512 [ 88.045110][ T26] audit: type=1326 audit(1754968546.433:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4655 comm="syz.4.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d062d0be9 code=0x7ffc0000 [ 88.105023][ T4661] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 88.207829][ T4666] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 88.253138][ T4661] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,dioread_nolock,quota,,errors=continue. Quota mode: writeback. [ 88.317417][ T4670] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 88.324358][ T4670] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 88.354567][ T4670] vhci_hcd vhci_hcd.0: Device attached [ 88.356612][ T4666] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 88.366768][ T4666] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 88.401608][ T4661] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.427508][ T4666] vhci_hcd vhci_hcd.0: Device attached [ 88.488274][ T4677] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(8) [ 88.494876][ T4677] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 88.525179][ T4677] vhci_hcd vhci_hcd.0: Device attached [ 88.552105][ T4674] vhci_hcd: connection closed [ 88.552162][ T4671] vhci_hcd: connection closed [ 88.554451][ T9] vhci_hcd: stop threads [ 88.561073][ T1111] vhci_hcd: vhci_device speed not set [ 88.579095][ T4678] vhci_hcd: connection closed [ 88.587424][ T4661] netlink: 'syz.3.107': attribute type 5 has an invalid length. [ 88.611082][ T9] vhci_hcd: release socket [ 88.619896][ T9] vhci_hcd: disconnect device [ 88.630373][ T9] vhci_hcd: stop threads [ 88.634651][ T9] vhci_hcd: release socket [ 88.653823][ T1111] usb 37-2: new full-speed USB device number 2 using vhci_hcd [ 88.661926][ T9] vhci_hcd: disconnect device [ 88.681335][ T9] vhci_hcd: stop threads [ 88.685625][ T9] vhci_hcd: release socket [ 88.723264][ T9] vhci_hcd: disconnect device [ 89.213177][ T4552] Set syz1 is full, maxelem 65536 reached [ 89.314863][ T26] audit: type=1326 audit(1754968547.843:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4700 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a4385be9 code=0x7ffc0000 [ 89.344277][ T4701] netlink: 44 bytes leftover after parsing attributes in process `syz.1.117'. [ 89.356321][ T26] audit: type=1326 audit(1754968547.863:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4700 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3a4385be9 code=0x7ffc0000 [ 89.431058][ T26] audit: type=1326 audit(1754968547.873:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4700 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a4385be9 code=0x7ffc0000 [ 89.478478][ T4661] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.486969][ T4661] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.501582][ T26] audit: type=1326 audit(1754968547.873:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4700 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3a4385be9 code=0x7ffc0000 [ 89.560397][ T4173] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 89.588371][ T26] audit: type=1326 audit(1754968547.873:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4700 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a4385be9 code=0x7ffc0000 [ 89.630546][ T26] audit: type=1326 audit(1754968547.873:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4700 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3a4385be9 code=0x7ffc0000 [ 89.654629][ T26] audit: type=1326 audit(1754968547.873:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4700 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a4385be9 code=0x7ffc0000 [ 89.679080][ T26] audit: type=1326 audit(1754968547.873:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4700 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3a4385be9 code=0x7ffc0000 [ 90.371273][ T4173] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 90.382752][ T4173] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.392615][ T4173] usb 3-1: config 0 interface 0 has no altsetting 0 [ 90.399246][ T4173] usb 3-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 90.408495][ T4173] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.432976][ T4173] usb 3-1: config 0 descriptor?? [ 90.441536][ T4661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.471315][ T4661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.771040][ T4173] usbhid 3-1:0.0: can't add hid device: -71 [ 90.777938][ T4173] usbhid: probe of 3-1:0.0 failed with error -71 [ 90.800857][ T4173] usb 3-1: USB disconnect, device number 2 [ 90.816810][ T4661] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.827210][ T4661] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.836489][ T4661] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.846601][ T4661] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.019864][ T4712] netlink: 'syz.4.120': attribute type 21 has an invalid length. [ 91.028215][ T4712] netlink: 132 bytes leftover after parsing attributes in process `syz.4.120'. [ 91.039175][ T4712] netlink: 'syz.4.120': attribute type 1 has an invalid length. [ 91.247218][ T4173] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 91.305320][ T4740] loop2: detected capacity change from 0 to 128 [ 91.322429][ T4173] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 91.370609][ T4740] EXT4-fs (loop2): Ignoring removed nobh option [ 91.416948][ T4740] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 91.494696][ T4740] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 91.563766][ T4751] loop3: detected capacity change from 0 to 512 [ 91.670823][ T4751] EXT4-fs (loop3): error: journal path ./bus is not a block device [ 91.750755][ T4752] fido_id[4752]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 91.981285][ T4759] loop0: detected capacity change from 0 to 1024 [ 92.025337][ T4759] EXT4-fs (loop0): Ignoring removed nobh option [ 92.047507][ T4759] EXT4-fs (loop0): Ignoring removed bh option [ 92.075575][ T4759] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 92.164204][ T4759] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,discard,resgid=0x0000000000000000,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 92.514426][ T4776] loop3: detected capacity change from 0 to 2048 [ 92.554045][ T4783] syz.0.144[4783] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.554178][ T4783] syz.0.144[4783] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.595218][ T4776] loop3: p2 p3 p7 [ 92.648522][ T4783] loop0: detected capacity change from 0 to 512 [ 92.739632][ T4783] EXT4-fs (loop0): orphan cleanup on readonly fs [ 92.804614][ T4783] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.144: bad orphan inode 13 [ 92.869251][ T4803] loop1: detected capacity change from 0 to 512 [ 92.872291][ T4805] loop4: detected capacity change from 0 to 512 [ 92.895225][ T4783] ext4_test_bit(bit=12, block=18) = 1 [ 92.900034][ T4808] loop3: detected capacity change from 0 to 512 [ 92.901592][ T4783] is_bad_inode(inode)=0 [ 92.911805][ T4783] NEXT_ORPHAN(inode)=2130706432 [ 92.916873][ T4783] max_ino=32 [ 92.920087][ T4783] i_nlink=1 [ 92.923653][ T4783] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 92.952930][ T4783] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 93.009955][ T4803] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 93.031732][ T4783] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback. [ 93.031972][ T4803] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.039901][ T4808] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 93.062118][ T4805] EXT4-fs (loop4): mounted filesystem without journal. Opts: noquota,noquota,grpjquota=,noauto_da_alloc,dioread_lock,,errors=continue. Quota mode: writeback. [ 93.134271][ T4808] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.150414][ T4805] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.310684][ T26] kauditd_printk_skb: 95 callbacks suppressed [ 93.310704][ T26] audit: type=1800 audit(1754968551.833:257): pid=4808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.151" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 93.355976][ T4805] EXT4-fs error (device loop4): ext4_xattr_block_find:1866: inode #15: comm syz.4.152: corrupted xattr block 19 [ 93.383214][ T4317] udevd[4317]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 93.399168][ T4293] udevd[4293]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 93.412712][ T4560] udevd[4560]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 94.160403][ T1111] vhci_hcd: vhci_device speed not set [ 94.414530][ T4825] loop2: detected capacity change from 0 to 8192 [ 94.416228][ T4832] loop3: detected capacity change from 0 to 512 [ 94.428584][ T26] audit: type=1326 audit(1754968552.953:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4837 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d062d0be9 code=0x7ffc0000 [ 94.453610][ T4838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.164'. [ 94.489603][ T26] audit: type=1326 audit(1754968552.953:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4837 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d062d0be9 code=0x7ffc0000 [ 94.512118][ T26] audit: type=1326 audit(1754968552.953:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4837 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f3d062d0be9 code=0x7ffc0000 [ 94.542460][ T26] audit: type=1326 audit(1754968552.953:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4837 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d062d0be9 code=0x7ffc0000 [ 94.579582][ T4832] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 94.579983][ T26] audit: type=1326 audit(1754968552.953:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4837 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d062d0be9 code=0x7ffc0000 [ 94.616250][ T4832] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.678490][ T26] audit: type=1326 audit(1754968553.203:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4846 comm="syz.4.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d062d0be9 code=0x7ffc0000 [ 94.710852][ T26] audit: type=1326 audit(1754968553.233:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4846 comm="syz.4.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f3d062d0be9 code=0x7ffc0000 [ 94.841343][ T26] audit: type=1326 audit(1754968553.233:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4846 comm="syz.4.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d062d0be9 code=0x7ffc0000 [ 94.907363][ T26] audit: type=1326 audit(1754968553.233:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4846 comm="syz.4.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d062d0be9 code=0x7ffc0000 [ 95.452982][ T4225] usb usb38-port1: Cannot enable. Maybe the USB cable is bad? [ 95.761011][ T4225] usb usb38-port1: Cannot enable. Maybe the USB cable is bad? [ 95.844455][ T4225] usb usb38-port1: attempt power cycle [ 96.303752][ T4888] loop0: detected capacity change from 0 to 1024 [ 96.533971][ T4888] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.180: Invalid block bitmap block 0 in block_group 0 [ 96.553585][ T4225] usb usb38-port1: Cannot enable. Maybe the USB cable is bad? [ 96.562356][ T4888] EXT4-fs error (device loop0): ext4_acquire_dquot:6207: comm syz.0.180: Failed to acquire dquot type 0 [ 96.578210][ T4888] EXT4-fs error (device loop0): ext4_free_blocks:6223: comm syz.0.180: Freeing blocks not in datazone - block = 0, count = 4096 [ 96.600632][ T4888] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.180: Invalid inode bitmap blk 0 in block_group 0 [ 96.616072][ T4888] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 96.626824][ T4888] EXT4-fs (loop0): 1 orphan inode deleted [ 96.632708][ T4888] EXT4-fs (loop0): mounted filesystem without journal. Opts: €; max_batch_time=0x0000000000000006,i_version,,errors=continue. Quota mode: writeback. [ 96.835517][ T4888] usb usb1: usbfs: process 4888 (syz.0.180) did not claim interface 0 before use [ 97.172521][ T4891] loop4: detected capacity change from 0 to 512 [ 98.091463][ T4269] EXT4-fs error (device loop0): ext4_release_dquot:6243: comm kworker/u4:5: Failed to release dquot type 0 [ 98.186112][ T4891] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 98.250761][ T4891] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.467477][ T4225] usb usb38-port1: Cannot enable. Maybe the USB cable is bad? [ 98.487882][ T4225] usb usb38-port1: unable to enumerate USB device [ 98.518056][ T4901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.183'. [ 99.295316][ T4918] netlink: 12 bytes leftover after parsing attributes in process `syz.1.193'. [ 99.341549][ T4915] loop3: detected capacity change from 0 to 2048 [ 99.367206][ T4192] [ 99.369573][ T4192] ====================================================== [ 99.376750][ T4192] WARNING: possible circular locking dependency detected [ 99.383941][ T4192] 5.15.189-syzkaller #0 Not tainted [ 99.389198][ T4192] ------------------------------------------------------ [ 99.396340][ T4192] syz-executor/4192 is trying to acquire lock: [ 99.402486][ T4192] ffff8880b9027e78 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0x186/0x7c0 [ 99.411152][ T4192] [ 99.411152][ T4192] but task is already holding lock: [ 99.418489][ T4192] ffff88807d2741b8 (&trie->lock){..-.}-{2:2}, at: trie_delete_elem+0x90/0x710 [ 99.427329][ T4192] [ 99.427329][ T4192] which lock already depends on the new lock. [ 99.427329][ T4192] [ 99.437706][ T4192] [ 99.437706][ T4192] the existing dependency chain (in reverse order) is: [ 99.446689][ T4192] [ 99.446689][ T4192] -> #2 (&trie->lock){..-.}-{2:2}: [ 99.453965][ T4192] _raw_spin_lock_irqsave+0xa4/0xf0 [ 99.459745][ T4192] trie_delete_elem+0x90/0x710 [ 99.464998][ T4192] 0xffffffffa001658d [ 99.469471][ T4192] bpf_trace_run3+0x17e/0x320 [ 99.474655][ T4192] __traceiter_timer_start+0x73/0xc0 [ 99.480430][ T4192] enqueue_timer+0x394/0x520 [ 99.485512][ T4192] __mod_timer+0x8e1/0xd20 [ 99.490418][ T4192] sk_reset_timer+0x1f/0xb0 [ 99.495411][ T4192] tipc_sk_finish_conn+0x154/0x7e0 [ 99.501014][ T4192] tipc_socketpair+0x250/0x470 [ 99.506268][ T4192] __sys_socketpair+0x2ac/0x540 [ 99.511611][ T4192] __x64_sys_socketpair+0x97/0xb0 [ 99.517193][ T4192] do_syscall_64+0x4c/0xa0 [ 99.522102][ T4192] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 99.528484][ T4192] [ 99.528484][ T4192] -> #1 (&base->lock){-.-.}-{2:2}: [ 99.535756][ T4192] _raw_spin_lock_irqsave+0xa4/0xf0 [ 99.541444][ T4192] lock_timer_base+0x123/0x270 [ 99.546715][ T4192] __mod_timer+0x117/0xd20 [ 99.551720][ T4192] queue_delayed_work_on+0x126/0x1e0 [ 99.557516][ T4192] kvfree_call_rcu+0x4a9/0x7c0 [ 99.562770][ T4192] rtnl_register_internal+0x44e/0x540 [ 99.568645][ T4192] rtnl_register+0x2e/0x70 [ 99.573556][ T4192] ip_rt_init+0x2e0/0x3a0 [ 99.578378][ T4192] ip_init+0xa/0x20 [ 99.582698][ T4192] inet_init+0x28b/0x3a0 [ 99.587434][ T4192] do_one_initcall+0x1ee/0x680 [ 99.592690][ T4192] do_initcall_level+0x137/0x1f0 [ 99.598143][ T4192] do_initcalls+0x4b/0x90 [ 99.602963][ T4192] kernel_init_freeable+0x3ce/0x560 [ 99.608670][ T4192] kernel_init+0x19/0x1b0 [ 99.613488][ T4192] ret_from_fork+0x1f/0x30 [ 99.618394][ T4192] [ 99.618394][ T4192] -> #0 (krc.lock){..-.}-{2:2}: [ 99.625389][ T4192] __lock_acquire+0x2c33/0x7c60 [ 99.630737][ T4192] lock_acquire+0x197/0x3f0 [ 99.635737][ T4192] _raw_spin_lock+0x2a/0x40 [ 99.640739][ T4192] kvfree_call_rcu+0x186/0x7c0 [ 99.646005][ T4192] trie_delete_elem+0x58c/0x710 [ 99.651355][ T4192] bpf_prog_8c8ab8634bca3061+0x3a/0x99c [ 99.657393][ T4192] bpf_trace_run2+0x15b/0x2d0 [ 99.662564][ T4192] __bpf_trace_kfree+0x6e/0x90 [ 99.667824][ T4192] kfree+0x25f/0x2a0 [ 99.672212][ T4192] tomoyo_path_perm+0x3e8/0x510 [ 99.677641][ T4192] security_inode_getattr+0xcf/0x120 [ 99.683419][ T4192] vfs_getattr+0x26/0x3a0 [ 99.688261][ T4192] vfs_statx+0x149/0x4d0 [ 99.692994][ T4192] __x64_sys_newfstatat+0x12c/0x1b0 [ 99.698685][ T4192] do_syscall_64+0x4c/0xa0 [ 99.703598][ T4192] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 99.709984][ T4192] [ 99.709984][ T4192] other info that might help us debug this: [ 99.709984][ T4192] [ 99.720201][ T4192] Chain exists of: [ 99.720201][ T4192] krc.lock --> &base->lock --> &trie->lock [ 99.720201][ T4192] [ 99.731900][ T4192] Possible unsafe locking scenario: [ 99.731900][ T4192] [ 99.739320][ T4192] CPU0 CPU1 [ 99.744663][ T4192] ---- ---- [ 99.749998][ T4192] lock(&trie->lock); [ 99.754038][ T4192] lock(&base->lock); [ 99.760594][ T4192] lock(&trie->lock); [ 99.767220][ T4192] lock(krc.lock); [ 99.771112][ T4192] [ 99.771112][ T4192] *** DEADLOCK *** [ 99.771112][ T4192] [ 99.779245][ T4192] 3 locks held by syz-executor/4192: [ 99.784504][ T4192] #0: ffffffff8c6ac1b8 (tomoyo_ss){....}-{0:0}, at: rcu_lock_acquire+0x5/0x30 [ 99.793430][ T4192] #1: ffffffff8c11c360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 99.802696][ T4192] #2: ffff88807d2741b8 (&trie->lock){..-.}-{2:2}, at: trie_delete_elem+0x90/0x710 [ 99.811967][ T4192] [ 99.811967][ T4192] stack backtrace: [ 99.817827][ T4192] CPU: 0 PID: 4192 Comm: syz-executor Not tainted 5.15.189-syzkaller #0 [ 99.826123][ T4192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 99.836150][ T4192] Call Trace: [ 99.839407][ T4192] [ 99.842315][ T4192] dump_stack_lvl+0x168/0x230 [ 99.846976][ T4192] ? load_image+0x3b0/0x3b0 [ 99.851461][ T4192] ? show_regs_print_info+0x20/0x20 [ 99.856635][ T4192] ? print_circular_bug+0x12b/0x1a0 [ 99.861805][ T4192] check_noncircular+0x274/0x310 [ 99.866713][ T4192] ? add_chain_block+0x940/0x940 [ 99.871621][ T4192] ? lockdep_lock+0xdc/0x1e0 [ 99.876183][ T4192] ? mark_lock+0x94/0x320 [ 99.880484][ T4192] __lock_acquire+0x2c33/0x7c60 [ 99.885313][ T4192] ? verify_lock_unused+0x140/0x140 [ 99.890659][ T4192] lock_acquire+0x197/0x3f0 [ 99.895147][ T4192] ? kvfree_call_rcu+0x186/0x7c0 [ 99.900073][ T4192] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 99.905417][ T4192] ? read_lock_is_recursive+0x10/0x10 [ 99.910774][ T4192] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 99.916640][ T4192] ? _raw_spin_unlock+0x40/0x40 [ 99.921461][ T4192] ? debug_object_active_state+0x6b/0x340 [ 99.927152][ T4192] _raw_spin_lock+0x2a/0x40 [ 99.931626][ T4192] ? kvfree_call_rcu+0x186/0x7c0 [ 99.936533][ T4192] kvfree_call_rcu+0x186/0x7c0 [ 99.941268][ T4192] ? call_rcu+0x930/0x930 [ 99.945568][ T4192] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 99.950910][ T4192] ? _raw_spin_lock+0x40/0x40 [ 99.955570][ T4192] ? longest_prefix_match+0x4c6/0x660 [ 99.960922][ T4192] trie_delete_elem+0x58c/0x710 [ 99.965745][ T4192] bpf_prog_8c8ab8634bca3061+0x3a/0x99c [ 99.971262][ T4192] bpf_trace_run2+0x15b/0x2d0 [ 99.975927][ T4192] ? exc_int3+0xa/0x70 [ 99.979969][ T4192] ? bpf_trace_run1+0x2d0/0x2d0 [ 99.984798][ T4192] ? tomoyo_path_perm+0x3e8/0x510 [ 99.989795][ T4192] ? tomoyo_path_perm+0x3e8/0x510 [ 99.994797][ T4192] __bpf_trace_kfree+0x6e/0x90 [ 99.999551][ T4192] ? tomoyo_path_perm+0x3e8/0x510 [ 100.004552][ T4192] kfree+0x25f/0x2a0 [ 100.008429][ T4192] ? tomoyo_path_permission+0x2a4/0x380 [ 100.013949][ T4192] tomoyo_path_perm+0x3e8/0x510 [ 100.018774][ T4192] ? tomoyo_path_permission+0x380/0x380 [ 100.024301][ T4192] ? lockdep_hardirqs_on+0x94/0x140 [ 100.029480][ T4192] ? rcu_is_watching+0x11/0xa0 [ 100.034215][ T4192] security_inode_getattr+0xcf/0x120 [ 100.039473][ T4192] vfs_getattr+0x26/0x3a0 [ 100.043806][ T4192] ? user_path_at_empty+0x13e/0x190 [ 100.048994][ T4192] vfs_statx+0x149/0x4d0 [ 100.053311][ T4192] ? __lock_acquire+0x7c60/0x7c60 [ 100.058317][ T4192] ? vfs_fstatat+0x40/0x40 [ 100.062721][ T4192] __x64_sys_newfstatat+0x12c/0x1b0 [ 100.067908][ T4192] ? __ia32_sys_newlstat+0x160/0x160 [ 100.073181][ T4192] ? lock_chain_count+0x20/0x20 [ 100.078004][ T4192] ? vtime_user_exit+0x2dc/0x400 [ 100.082923][ T4192] ? lockdep_hardirqs_on+0x94/0x140 [ 100.088103][ T4192] do_syscall_64+0x4c/0xa0 [ 100.092504][ T4192] ? clear_bhb_loop+0x30/0x80 [ 100.097166][ T4192] ? clear_bhb_loop+0x30/0x80 [ 100.101844][ T4192] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 100.107737][ T4192] RIP: 0033:0x7fe082c8c3fa [ 100.112143][ T4192] Code: 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 0b 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 90 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 [ 100.131822][ T4192] RSP: 002b:00007ffd422e4738 EFLAGS: 00000286 ORIG_RAX: 0000000000000106 [ 100.140217][ T4192] RAX: ffffffffffffffda RBX: 00007fe082d10c05 RCX: 00007fe082c8c3fa [ 100.148162][ T4192] RDX: 00007ffd422e4760 RSI: 00007ffd422e47f0 RDI: 00000000ffffff9c [ 100.156207][ T4192] RBP: 00007ffd422e47f0 R08: 0000000000000000 R09: 0000000000000000 [ 100.164152][ T4192] R10: 0000000000000100 R11: 0000000000000286 R12: 00007ffd422e5880 [ 100.172115][ T4192] R13: 00007fe082d10c05 R14: 00000000000183e4 R15: 00007ffd422e58c0 [ 100.180070][ T4192] [ 100.253759][ T4924] loop2: detected capacity change from 0 to 512 [ 100.271325][ T4915] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 100.316754][ T4924] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 100.322245][ T26] kauditd_printk_skb: 28 callbacks suppressed [ 100.322258][ T26] audit: type=1800 audit(1754968558.853:292): pid=4915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.190" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 100.341613][ T4924] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff)