last executing test programs: 40.43036133s ago: executing program 0 (id=188): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000003c0)=0x0) prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='netlink_extack\x00', r6}, 0x10) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newsa={0x13c, 0x1a, 0x713, 0x70bd28, 0x0, {{@in=@multicast1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffd, 0x8, 0x4e20, 0x82, 0xa, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in6=@private2={0xfc, 0x2, '\x00', 0xfe}, 0x4d4, 0x32}, @in6=@private2, {0x2, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x1c00000000000}, {0xff, 0xfffffffffffffffd, 0x0, 0xa}, {0x9, 0x4}, 0x70bd27, 0x10003506, 0x2, 0x4}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x141bc2, 0x3a) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 39.459226418s ago: executing program 0 (id=193): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f00000004c0)='./bus\x00', 0xa04255, &(0x7f0000000ec0)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRESHEX, @ANYRES32], 0xfd, 0x345, &(0x7f00000008c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, r4) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r7 = dup2(r5, r6) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001300)=@filter={'filter\x00', 0xe, 0x4, 0x3b0, 0xffffffff, 0x0, 0xd0, 0x0, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0x0, 0xffffffff, 0xff], [0xff000000, 0xffffffff, 0x0, 0xffffff00], 'nr0\x00', '\x00', {0xff}, {}, 0x73, 0x2, 0x5, 0x4}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv4={'\x00', '\xff\xff', @broadcast}, [0x0, 0x0, 0xff, 0xffffff00], [0xff0000ff, 0xff000000, 0xef3a7ce1e66999bf], 'veth0_macvtap\x00', 'wg2\x00', {0xff}, {}, 0x5c, 0x1, 0x2, 0x10}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x6, 0x18, 0x3}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@icmp6={{0x28}, {0xe, "f59d", 0x1}}, @common=@icmp6={{0x28}, {0xd, "0290", 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev={0xac, 0x14, 0x14, 0x35}, 'ipvlan1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r7, 0x10f, 0x85) 38.399090263s ago: executing program 0 (id=198): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) socket$nl_generic(0x11, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x110) 37.286331933s ago: executing program 0 (id=201): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x3, 0x1, 0x7fff0001}]}) flistxattr(r2, 0x0, 0xdeff) 36.870551287s ago: executing program 0 (id=202): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000010c0)=0x13) 35.245543908s ago: executing program 0 (id=212): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/warn_count', 0x0, 0x60) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000440)=ANY=[@ANYBLOB='shortname=mixed,iocharset=iso8859-=winnt,uni_xlate=1,uni_xlate=1,nonumtail=0,utf8=0,errors=continue,utf8=1,check=strict,iocharset=cp855,utf8=0,iocharset=koi8-u,codepage=857,utf8=0,rodir,shortname=win95,\x00'], 0x6, 0x2d4, &(0x7f00000006c0)="$eJzs3T9rZFUUAPDzkjdvZlWYKaxE8IEWVutmW5sJsgExlUsKtdDg7oJkgrALAf/g7Fa2NhYWfgJB8IPY+A0EW8HOVRauvH/MSzKJO8GJaH6/Jod7z3n3vJdL8lLkzgcvHh7cKePeo89/jtEoi41pTONxFpPYiM7DOGb6VQAA/2WPU4rfUuPMpOdOD2URMVpvawDAmpz9+7/sxfki/OHSWgMA1uT2O+++tb27e+vtshzFzuGXR3vVX/bV12Z++158FLO4GzdiHE8i6heFQdRvC1W4k1Ka52VlEq8czo/2qsrD939sr7/9a0RdvxXjmNRDKaW8C9LOm7u3tspGr35e9fFMu/60qr8Z43i+Xb99W+nqby6pj70iXn251//1GMdPH8bHMYs79dqL+i+2yvKN9PXvn71XdVXVZ/OjvWGdt5A2L/UbAwAAAAAAAAAAAAAAAAAAAADA/9r19uycYZSTP5szANvzdzafVPODKDuT4+fzNPVZd6H++UAppXmKb7vzdW6UZZnaxEV9Hi/k/YMFAQAAAAAAAAAAAAAAAAAA4Op68MmnB/uz2d37Fw6uxWKkOw0gj4g/bkdc9MrT3shLUQf5Wa0O2zX3Z7ONNjyek/dHYrPLySLObaO6iYs/loNVkq+d6rkNvvt+1dVHf58zWL7WPxl0u+tgP1v+DIfRjYzaTfJNEb2NVMRTrlWcNZVile1XLJ0ar3zvxbN1MD8nJ7LzGnv9l+bJtSPZybso6qfajLw2aHLbqUGb0ys/sTeeaj/HqCk//bMic1oHAAAAAAAAAAAAAAAAAACs1eK/f5dMPjq3dCMN19YWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFyqxef/rxDM2+KTU/GwGe8lF3H/wb95fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwNfwUAAP//ThJUUw==") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) socket$nl_route(0x10, 0x3, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x48, 0x0, 0x0) 20.173760823s ago: executing program 32 (id=212): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/warn_count', 0x0, 0x60) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000440)=ANY=[@ANYBLOB='shortname=mixed,iocharset=iso8859-=winnt,uni_xlate=1,uni_xlate=1,nonumtail=0,utf8=0,errors=continue,utf8=1,check=strict,iocharset=cp855,utf8=0,iocharset=koi8-u,codepage=857,utf8=0,rodir,shortname=win95,\x00'], 0x6, 0x2d4, &(0x7f00000006c0)="$eJzs3T9rZFUUAPDzkjdvZlWYKaxE8IEWVutmW5sJsgExlUsKtdDg7oJkgrALAf/g7Fa2NhYWfgJB8IPY+A0EW8HOVRauvH/MSzKJO8GJaH6/Jod7z3n3vJdL8lLkzgcvHh7cKePeo89/jtEoi41pTONxFpPYiM7DOGb6VQAA/2WPU4rfUuPMpOdOD2URMVpvawDAmpz9+7/sxfki/OHSWgMA1uT2O+++tb27e+vtshzFzuGXR3vVX/bV12Z++158FLO4GzdiHE8i6heFQdRvC1W4k1Ka52VlEq8czo/2qsrD939sr7/9a0RdvxXjmNRDKaW8C9LOm7u3tspGr35e9fFMu/60qr8Z43i+Xb99W+nqby6pj70iXn251//1GMdPH8bHMYs79dqL+i+2yvKN9PXvn71XdVXVZ/OjvWGdt5A2L/UbAwAAAAAAAAAAAAAAAAAAAADA/9r19uycYZSTP5szANvzdzafVPODKDuT4+fzNPVZd6H++UAppXmKb7vzdW6UZZnaxEV9Hi/k/YMFAQAAAAAAAAAAAAAAAAAA4Op68MmnB/uz2d37Fw6uxWKkOw0gj4g/bkdc9MrT3shLUQf5Wa0O2zX3Z7ONNjyek/dHYrPLySLObaO6iYs/loNVkq+d6rkNvvt+1dVHf58zWL7WPxl0u+tgP1v+DIfRjYzaTfJNEb2NVMRTrlWcNZVile1XLJ0ar3zvxbN1MD8nJ7LzGnv9l+bJtSPZybso6qfajLw2aHLbqUGb0ys/sTeeaj/HqCk//bMic1oHAAAAAAAAAAAAAAAAAACs1eK/f5dMPjq3dCMN19YWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFyqxef/rxDM2+KTU/GwGe8lF3H/wb95fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwNfwUAAP//ThJUUw==") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) socket$nl_route(0x10, 0x3, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x48, 0x0, 0x0) 16.333460803s ago: executing program 1 (id=259): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) connect$inet6(0xffffffffffffffff, &(0x7f0000001600)={0xa, 0x4e20, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x8a, &(0x7f0000000240)={[{@jqfmt_vfsold}, {@usrjquota}, {@acl}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@init_itable_val={'init_itable', 0x3d, 0x100}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}]}, 0x4, 0x44d, &(0x7f0000000900)="$eJzs3MtvG0UYAPDPdpw0fZBQyqOhhUBBRDySJn3QA5cikDiAhASHIk4hSatQt0FNkGgVQeAQjqgSd8QRib+AC+WCgBMSV7gjpAjl0sLJaO3d1E3sJE6cuNS/n7TJjGesmW93xx7Peh1AxxpM/uQi9kfE7xHRV83eWWGw+u/W8vzEP8vzE7kol9/6O1epd3N5fiKrmj1vXzVTLq/T7uK7EeOl0tSVND8yd+mDkdmr116YvjR+YerC1OWxM2dOnjjafXrsVEviTOK6OfDxzJHDr71z/Y2Jc9ff+/nbpL/70/LaOFplsLp363q61Y212YGadK6rjR2hKYWISA5XsTL++6IQvStlffHqZ23tHLCjyuV8uadx8UIZuIclE3WgE2Vv9Mnn32zbpanHXWHpbKysY9xKt2pJV+TTOsX0M9JOGIyIcwv/fpVssUPrEAAAtW6cjYjn683/8vFQTb370mso/RFxf0QcjIgHIuJQRDwYUan7cEQ80mT7q6+QrJ3/lPu2FNgmJfO/l9JrW3fO/7LZX/QX0tyBSvzF3Pnp0tTxdJ8MRbEnyY+u08YPr/z2RaOy2vlfsiXtZ3PBtB9/da1aoJscnxvfTsy1lj6NGOiqF39uZc6bzI8PR8TAFtuYfvabI43K+jeMfx0tmJSXv454pnr8F2JV/Jlcw+uToy+eHjs1sidKU8dHsrNirV9+XXyzUfsbH/+dtXSjHHvrnv8r8ffn9kTMXr12sXK9drb5Nhb/+LzhZ5qtnv/dubcr6e70sY/G5+aujEZ0515f+/jY7edm+ax+cv4PHas//g/G7T3xaEQkJ/HRiHgsIh5P+/5ERDwZEcfWif+nl596v/n411mVb6Ek/smNjn/UHv/mE4WLP37XfPyZ5PifrKSG0kc28/q32Q5uZ98BAADA/0W+8h34XH54JZ3PDw9Xv8N/KPbmSzOzc8+dn/nw8mT1u/L9UcxnK119Neuho+laXpYfW5U/ka4bf1noreSHJ2ZKk+0OHjrcvgbjP/Fnod29A3ac+7Wgcxn/0LmMf+hcxj90LuMfOle98f9JG/oB7L4N3v97d6sfwO4z/4fOZfxD5zL+oSM1vDc+v61b/iXalPi+e3u/1bD5ROTvkpDvmUQx6hZ1bfrHLLaY6Klb1O5XJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNb4LwAA//+KpOMG") inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x2000775) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), 0xffffffffffffffff) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_icmp(0x2, 0x2, 0x1) splice(r3, 0x0, r2, 0x0, 0x1000000008, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, &(0x7f0000000500)=""/74, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) r5 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400", @ANYRES32=r5, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{}, 0x0, &(0x7f0000000a40)=r6}, 0x20) 13.147625659s ago: executing program 3 (id=265): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f0000"], 0x48) r0 = syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) 12.640765671s ago: executing program 4 (id=267): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r0}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="01000000290b0000ffffffff00000000", @ANYRES64=0x0, @ANYRES64, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="010000"], 0x80}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b0000000500000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200410, &(0x7f0000000680)={[{@nodiscard}, {}, {@acl}, {@nomblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@jqfmt_vfsv1}, {@nodelalloc}, {@auto_da_alloc}, {@norecovery}]}, 0x5, 0x591, &(0x7f0000000f80)="$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") chdir(&(0x7f0000000380)='./file0\x00') creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x12) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x504, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @var={0x1, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x61]}}, 0x0, 0x53}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp6\x00') read$FUSE(r5, &(0x7f0000004980)={0x2020}, 0x2020) 12.51577774s ago: executing program 3 (id=268): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x9, 0x4, 0x8, 0xa}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000bd04000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000040000000000000000000085000000500000008500000050"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r2}, 0x10) close(r3) 11.564961647s ago: executing program 3 (id=270): socket(0x2, 0x3, 0xff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000340), 0x4, 0x241, &(0x7f00000009c0)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==") setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002440)=ANY=[@ANYBLOB="3800000020000100000000000000000002000000000000000040000014000300"], 0x38}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1, 0xfffffffb, 0xa) 9.141536942s ago: executing program 3 (id=272): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r5}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x48) 7.237300246s ago: executing program 2 (id=275): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) socket$nl_generic(0x11, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x110) 7.181495551s ago: executing program 1 (id=276): syz_open_pts(0xffffffffffffffff, 0x2800) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000010c0)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0, 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r5 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) write$binfmt_format(r5, &(0x7f0000000100)='-1\x00', 0x2) close_range(r5, 0xffffffffffffffff, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="000000000000000066e6b3293f7285d8d27700000000007b2619b92854f4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, 0xffffffffffffffff, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x25c4, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone3(0x0, 0x0) 6.103507067s ago: executing program 2 (id=277): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x1) timer_create(0x7, 0x0, 0x0) 5.885080025s ago: executing program 2 (id=278): r0 = open(0x0, 0x80140, 0x0) memfd_create(&(0x7f0000000440)='4F\xd1\x87g\xcax(\xfco&vCHHki\x8e\xf6t\xcb\x8a\v\xc8\xd0\xa0|naL:\x87S\x93\x8c\x9d\x9c\x1d\xed\x94\xf1\xb5\xeb\xf9\xd3\x1bmdwfA\xcbS\x9bXWT\xf5\x9dU\xb9\xbb`\xdf\x89`\xf11N \x14\x9c\x99\x19\xa8', 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) open_tree(0xffffffffffffffff, 0x0, 0x1c00) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) eventfd2(0x7ff, 0x80001) io_submit(r7, 0x0, 0x0) poll(0x0, 0xfffffee4, 0x2000004) fcntl$setlease(r0, 0x400, 0x1) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r9, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}]) 5.669602792s ago: executing program 4 (id=279): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() wait4(r0, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000080000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x803, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10b, 0x8000000000002}) dup3(0xffffffffffffffff, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x20, 0x0, &(0x7f00000004c0)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0x2020) 4.306817583s ago: executing program 2 (id=280): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) sendto$inet(r5, 0x0, 0x0, 0x40040, 0x0, 0x0) 4.136909576s ago: executing program 3 (id=281): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r3}, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x40400, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x842, 0x0) pwrite64(r4, 0x0, 0xeffd, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e00f20c06635000000400f22c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x54}], 0x1555555555555457, 0x0, 0x0, 0x0) 3.559234362s ago: executing program 1 (id=282): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) pipe(&(0x7f0000000280)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x2f, 0x9, 0x0, 0x2, 0x21, @private2, @mcast2, 0x20, 0x10, 0x81, 0x4}}) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10820408}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=@delchain={0x2c, 0x65, 0x400, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xc}, {0xc, 0xb}, {0xffff, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8080) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x21, 0x0, 0x0, 0x2}}, &(0x7f00000028c0)=""/4123, 0x1a, 0x101b, 0x1}, 0x28) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10138, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000950000000000000095f20bd48175c2637c84bb2d00739f1d369192ec208a1adeb04e4915459c7fff52c6cffe592ef48ca9f08aadda435dd66302bd1512f758a60e5b099a1f3e7c60fee594833fecd408c45b9a4c4cd4ad2c4454261827bc40b1866e149c17ab765ffa4fb8fc130e90afe0e320e2b8c542422c036f6b"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @empty}}) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0xba87317d461c07c9, 0x70bd2d, 0x4004}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="a2", 0x1}], 0x1}, 0x4006041) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0xf, 0x4, 0x4, 0x16, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 3.200427352s ago: executing program 2 (id=283): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$eJzs3M9vFGUfAPDvbHdpgZfXioiCKAU0Nia2UFA4eMHExIMmRjzIsWkrQRYwtAchREpi8Ezi3Xg03jTxqkfjyT8ADx5MDAkxXABPa2Z3pt3ur+7CtqXs55Ns+zwzz8zzPDPzzD77PDsbwMAaS/8kEf+LiFsR8VQtujLBWO3f/btXZx7cvToTi5XKqX+Sarp7aTyTb7c9i4wXIgpfJg07rJm/fOXcdLk8dymLTy6c/2xy/vKV18+enz4zd2buwtSJE8eOHjn+5tQbvVeqRX5pve7t/eLivj3vnr75/kwxXz6S/a+vR1vF3oox1mHdK73t6rG3oy6cNB+na+taGLo2kl3WpbT9Xy0fPL3RBQLWTaVSqQy3X71YaXS9aQmwaSWx0SUANkb+Rp9+/s1f69T1eCzcOVn7AJTW+372qq0pRiFLU2r4fNtPYxHx8eK/36Sv6DQO8ecaFQAAGDi/nMx7go39v0Lsrkv3/2wOZTQino6InRHxTETsiohnI6ppn4uI5xszSCIqHfLf1RBfzv/HbBahcPuRK9lB2v97K5vbWtn/y3t/MTqUxXZE5B3mucPZMRmP0vAnZ8tzR9rsf8sq+df3/9JXmn/eF8zKcbvYMEA3O70w/XC1bXbnesTeYmP9k2J64vJpnCQi9kTE3h72O1oXPvvad/uWIqWV6Vavf1WlxZRez/NxrVS+jXi1dv4XY8X5X84x6Tw/OTkS5bnDk+lVcLhlHr/9fuODdvmvWv+f/mrc5J3jP5961GovSc//trrrP/L52+X6jyYRydJ87XxEZai3PG788VV1v2OHmtc97PW/JfmoGs7b1+fTCwuXjkRsSd5rXj61vG0ez9On9R8/1Lr978y2SY/ECxGRXsQvRsRLEbE/K/uBiDgYES2qtuTXt1/+tN26Lq//NZPWf7bl/W/F+V+er+8ykG+cLhk6d+DWgzY3j+7O/7FqaDxb0vr+l6y4RXRb0kc7egAAALA5FKL63f/CxFK4UJiYqI0B7YpthfLF+YX9EXFhtvaMwGiUCvlIV208uJTk45+jdfGphvjRbNz466Gt1fjEzMXy7EZXHgbc9mqbT5raf+rvHsd5gU2oD/NowCa1WvvffXOdCgKsO+//MLjq2v9imySLvikDTybv/zC4WrX/a/F9x2cX3DNg86toyzDQtH8YXMX4cClcfey55dO2wJPI+z8MpF6f6+8tUBluvWokWvxiwMjaFGNri7w2JJD2rPq4w1JEdJd468NkkXcB2//CQ6G3HQ5H86qh6LRV0sPvOOSB9KismvjM7r5f/PlvovT7svlhuZ2WujzdfQpsyO0IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg7/4LAAD///QJ1ng=") r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) socket$inet6(0xa, 0x1, 0x0) fdatasync(r3) 3.189996532s ago: executing program 4 (id=284): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @loopback, 0x0, 0x2, [@local, @multicast2]}, 0x18) 2.781520975s ago: executing program 3 (id=285): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syslog(0x3, &(0x7f0000000700)=""/231, 0xe7) 2.608183719s ago: executing program 1 (id=286): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) socket$nl_generic(0x11, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x110) 1.570081263s ago: executing program 4 (id=287): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) 1.35465226s ago: executing program 4 (id=288): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) syz_emit_ethernet(0x9e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback={0x600, 0x1ff0000aa}, @private1}}}}}}, 0x0) 1.35400583s ago: executing program 1 (id=289): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffffb5, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10138, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000094c229a800000000", @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}}) 273.549847ms ago: executing program 4 (id=290): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x3}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 214.777762ms ago: executing program 1 (id=291): syz_open_pts(0xffffffffffffffff, 0x2800) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000010c0)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0, 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r5 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) write$binfmt_format(r5, &(0x7f0000000100)='-1\x00', 0x2) close_range(r5, 0xffffffffffffffff, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="000000000000000066e6b3293f7285d8d27700000000007b2619b92854f4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, 0xffffffffffffffff, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x25c4, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone3(0x0, 0x0) 0s ago: executing program 2 (id=292): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() wait4(r0, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000080000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x803, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x20, 0x0, &(0x7f00000004c0)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f00000034c0)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.122' (ED25519) to the list of known hosts. [ 63.415776][ T4172] cgroup: Unknown subsys name 'net' [ 63.565719][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.062710][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 67.012738][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 67.053931][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 67.102513][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 67.135907][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 67.160763][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 67.268349][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.275703][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.284853][ T4186] device bridge_slave_0 entered promiscuous mode [ 67.297273][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.304531][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.312685][ T4186] device bridge_slave_1 entered promiscuous mode [ 67.330334][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.337527][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.345951][ T4185] device bridge_slave_0 entered promiscuous mode [ 67.383932][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.391145][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.399429][ T4185] device bridge_slave_1 entered promiscuous mode [ 67.420366][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.427494][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.435867][ T4187] device bridge_slave_0 entered promiscuous mode [ 67.468021][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.477421][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.484715][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.492642][ T4187] device bridge_slave_1 entered promiscuous mode [ 67.500106][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.507222][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.515865][ T4183] device bridge_slave_0 entered promiscuous mode [ 67.531040][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.538169][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.546421][ T4184] device bridge_slave_0 entered promiscuous mode [ 67.555895][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.572998][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.580209][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.588232][ T4183] device bridge_slave_1 entered promiscuous mode [ 67.598971][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.615513][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.622836][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.631149][ T4184] device bridge_slave_1 entered promiscuous mode [ 67.656027][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.690389][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.709876][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.730592][ T4186] team0: Port device team_slave_0 added [ 67.738872][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.757865][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.769124][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.780283][ T4186] team0: Port device team_slave_1 added [ 67.787657][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.807440][ T4185] team0: Port device team_slave_0 added [ 67.846354][ T4185] team0: Port device team_slave_1 added [ 67.885491][ T4187] team0: Port device team_slave_0 added [ 67.900674][ T4183] team0: Port device team_slave_0 added [ 67.907921][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.915185][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.941294][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.953764][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.960829][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.986898][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.000227][ T4184] team0: Port device team_slave_0 added [ 68.006500][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.013509][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.039922][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.052862][ T4187] team0: Port device team_slave_1 added [ 68.060392][ T4183] team0: Port device team_slave_1 added [ 68.080485][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.087542][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.113736][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.130256][ T4184] team0: Port device team_slave_1 added [ 68.157177][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.164296][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.196503][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.233613][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.240791][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.267089][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.279177][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.286147][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.312490][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.340187][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.347161][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.373742][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.392848][ T4186] device hsr_slave_0 entered promiscuous mode [ 68.400038][ T4186] device hsr_slave_1 entered promiscuous mode [ 68.413993][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.421176][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.447828][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.476260][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.483328][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.510064][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.545014][ T4185] device hsr_slave_0 entered promiscuous mode [ 68.552149][ T4185] device hsr_slave_1 entered promiscuous mode [ 68.559059][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.566860][ T4185] Cannot create hsr debugfs directory [ 68.617385][ T4187] device hsr_slave_0 entered promiscuous mode [ 68.624582][ T4187] device hsr_slave_1 entered promiscuous mode [ 68.632061][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.639748][ T4187] Cannot create hsr debugfs directory [ 68.655404][ T4183] device hsr_slave_0 entered promiscuous mode [ 68.662633][ T4183] device hsr_slave_1 entered promiscuous mode [ 68.670081][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 68.676399][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.677041][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 68.684702][ T2237] Bluetooth: hci3: command 0x0409 tx timeout [ 68.695583][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 68.696197][ T2237] Bluetooth: hci1: command 0x0409 tx timeout [ 68.702674][ T4183] Cannot create hsr debugfs directory [ 68.727916][ T4184] device hsr_slave_0 entered promiscuous mode [ 68.734794][ T4184] device hsr_slave_1 entered promiscuous mode [ 68.742462][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.750285][ T4184] Cannot create hsr debugfs directory [ 69.065853][ T4183] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.079974][ T4183] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.089861][ T4183] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.104101][ T4183] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.158520][ T4185] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.182002][ T4185] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.195020][ T4185] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.204379][ T4185] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.286373][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.295911][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.305541][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.325857][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.345981][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.402594][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.412642][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.423544][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.432925][ T4187] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.444527][ T4187] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.455392][ T4187] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.470871][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.491565][ T4187] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.505121][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.516839][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.526515][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.534155][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.543806][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.557336][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.571744][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.580496][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.587577][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.623333][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.632633][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.641758][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.656998][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.677987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.687400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.697147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.710067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.720148][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.731112][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.740219][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.747327][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.762424][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.771815][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.780894][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.804018][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.827512][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.836316][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.845621][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.854712][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.864716][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.871854][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.884830][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.896623][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.911038][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.926295][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.942003][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.956779][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.965776][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.987609][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.009051][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.022299][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.062160][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.079690][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.090389][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.100184][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.109497][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.118266][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.126185][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.134377][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.155484][ T4185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.166628][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.188821][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.197527][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.207117][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.217250][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.229797][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.245589][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.258258][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.267621][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.293679][ T3108] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.301057][ T3108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.309377][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.316911][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.325722][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.338302][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.347875][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.356910][ T3108] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.364031][ T3108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.377770][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.394154][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.440382][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.459093][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.466964][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.476478][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.485767][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.494745][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.508358][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.531083][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.540809][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.548313][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.557866][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.570115][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.579328][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.587732][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.594829][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.603695][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.629652][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.636751][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.648041][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.661149][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.671188][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.691325][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.703072][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.714438][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.721610][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.729951][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.739212][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.749643][ T4242] Bluetooth: hci1: command 0x041b tx timeout [ 70.756332][ T4249] Bluetooth: hci0: command 0x041b tx timeout [ 70.763220][ T4249] Bluetooth: hci3: command 0x041b tx timeout [ 70.764942][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.775642][ T4249] Bluetooth: hci2: command 0x041b tx timeout [ 70.782767][ T4249] Bluetooth: hci4: command 0x041b tx timeout [ 70.786041][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.801844][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.826213][ T4183] device veth0_vlan entered promiscuous mode [ 70.835489][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.845529][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.854438][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.863834][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.873281][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.882700][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.899674][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.913423][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.922200][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.930346][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.938183][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.968349][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.978228][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.996665][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.005501][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.030443][ T4183] device veth1_vlan entered promiscuous mode [ 71.043456][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.062998][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.083835][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.123095][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.132890][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.141509][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.151900][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.161815][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.171812][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.184816][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.193997][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.203032][ T3108] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.210152][ T3108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.238050][ T4183] device veth0_macvtap entered promiscuous mode [ 71.252181][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.261118][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.274758][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.312677][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.319314][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.338079][ T4183] device veth1_macvtap entered promiscuous mode [ 71.348432][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.359128][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.367276][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.378028][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.387089][ T3108] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.394229][ T3108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.402372][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.411439][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.420866][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.429421][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.437908][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.446472][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.457257][ T4185] device veth0_vlan entered promiscuous mode [ 71.478084][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.494750][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.505757][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.537944][ T4185] device veth1_vlan entered promiscuous mode [ 71.554540][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.563587][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.571902][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.580089][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.589833][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.601622][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.615414][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.623230][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.646236][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.663231][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.680862][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.689886][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.699760][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.708510][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.719374][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.733065][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.744909][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.755070][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.769304][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.777772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.786956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.797654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.817471][ T4185] device veth0_macvtap entered promiscuous mode [ 71.830574][ T4185] device veth1_macvtap entered promiscuous mode [ 71.846267][ T4183] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.855342][ T4183] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.865233][ T4183] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.875858][ T4183] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.886402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.895963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.905248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.913779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.923840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.933147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.956862][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.969428][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.982250][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.020489][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.036436][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.049106][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.057803][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.079407][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.091247][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.102318][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.141306][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.151117][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.161373][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.170916][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.180210][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.188137][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.202415][ T4186] device veth0_vlan entered promiscuous mode [ 72.215887][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.227451][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.241459][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.250606][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.296595][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.311241][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.320056][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.327885][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.357861][ T4186] device veth1_vlan entered promiscuous mode [ 72.387537][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.398159][ T4187] device veth0_vlan entered promiscuous mode [ 72.407644][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.415328][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.425650][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.435177][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.454143][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.490925][ T4187] device veth1_vlan entered promiscuous mode [ 72.544165][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.544791][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.552617][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.571156][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.572394][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.588122][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.597574][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.606447][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.617846][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.629023][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.629805][ T4186] device veth0_macvtap entered promiscuous mode [ 72.637004][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.653998][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.662976][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.693616][ T4186] device veth1_macvtap entered promiscuous mode [ 72.720279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.736218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.745232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.767602][ T4187] device veth0_macvtap entered promiscuous mode [ 72.783997][ T4184] device veth0_vlan entered promiscuous mode [ 72.790354][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.798356][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.802540][ T4184] device veth1_vlan entered promiscuous mode [ 72.822995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.831424][ T4291] Bluetooth: hci1: command 0x040f tx timeout [ 72.835740][ T4250] Bluetooth: hci4: command 0x040f tx timeout [ 72.838385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.848344][ T4250] Bluetooth: hci2: command 0x040f tx timeout [ 72.854405][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.864055][ T4250] Bluetooth: hci3: command 0x040f tx timeout [ 72.869697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.870942][ T4250] Bluetooth: hci0: command 0x040f tx timeout [ 72.880081][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.893364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.902006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.915056][ T4187] device veth1_macvtap entered promiscuous mode [ 72.996411][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.007832][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.023951][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.038115][ T4297] loop2: detected capacity change from 0 to 128 [ 73.047366][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.065909][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.082550][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.094719][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.126873][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.161608][ T26] audit: type=1800 audit(1756104085.837:2): pid=4297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3" name="file1" dev="loop2" ino=1048584 res=0 errno=0 [ 73.206686][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.267697][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.298992][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.320684][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.349753][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.366576][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.375613][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.384466][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.393829][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.403417][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.420653][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.432215][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.442594][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.454548][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.476916][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.491579][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.116250][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.136718][ T4184] device veth0_macvtap entered promiscuous mode [ 74.157342][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.167701][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.179096][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.190177][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.208071][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.223648][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.232787][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.245667][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.257489][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.275818][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.286752][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.296891][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.307643][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.327728][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.339549][ T4184] device veth1_macvtap entered promiscuous mode [ 74.348303][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.365730][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.378047][ T4187] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.388440][ T4187] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.397485][ T4187] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.412775][ T4187] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.453585][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.473513][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.485127][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.498416][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.517148][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.528052][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.539816][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.550817][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.562705][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.576915][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.587840][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.598008][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.615640][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.625927][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.643261][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.656346][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.674402][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.687983][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.752081][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.761325][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.771689][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.780765][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.950821][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.067613][ T26] audit: type=1326 audit(1756104087.577:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4309 comm="syz.4.7" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3bf940ebe9 code=0x0 [ 75.113681][ T4285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.296510][ T4285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.360958][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.486845][ T4174] Bluetooth: hci0: command 0x0419 tx timeout [ 75.493430][ T4174] Bluetooth: hci3: command 0x0419 tx timeout [ 75.499577][ T4174] Bluetooth: hci2: command 0x0419 tx timeout [ 75.505632][ T4174] Bluetooth: hci4: command 0x0419 tx timeout [ 75.511938][ T4174] Bluetooth: hci1: command 0x0419 tx timeout [ 75.538533][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.547456][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.574053][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.765480][ T4315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.774808][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.785356][ T4285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.806811][ T4285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.820018][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.834327][ T4315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.857573][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.870106][ T2286] Bluetooth: hci5: command 0x1003 tx timeout [ 75.877412][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 75.888668][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.953067][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.018701][ T4320] syz.4.8[4320] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.019731][ T4320] syz.4.8[4320] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.120263][ T4285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.158598][ C1] sched: RT throttling activated [ 77.174010][ T4285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.662241][ T4324] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.037154][ T4242] Bluetooth: hci5: command 0x1001 tx timeout [ 78.044469][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 78.078170][ T4285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.079616][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.087121][ T4285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.166140][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.259369][ T4328] device batadv_slave_1 entered promiscuous mode [ 78.323272][ T4327] device batadv_slave_1 left promiscuous mode [ 78.638080][ T4337] loop1: detected capacity change from 0 to 2048 [ 78.802865][ T4341] loop4: detected capacity change from 0 to 512 [ 79.212793][ T4341] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 79.224551][ T4341] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.554764][ T4337] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 80.825670][ T26] audit: type=1800 audit(1756104093.497:4): pid=4337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 80.881591][ T4335] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 80.928447][ T26] audit: type=1800 audit(1756104093.537:5): pid=4337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 80.961489][ T4337] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 81.004568][ T4337] EXT4-fs (loop1): This should not happen!! Data will be lost [ 81.004568][ T4337] [ 81.035008][ T4337] EXT4-fs (loop1): Total free blocks count 0 [ 81.054832][ T4337] EXT4-fs (loop1): Free/Dirty block details [ 81.069062][ T4337] EXT4-fs (loop1): free_blocks=4096 [ 81.085936][ T4337] EXT4-fs (loop1): dirty_blocks=16 [ 81.104272][ T4337] EXT4-fs (loop1): Block reservation details [ 81.126256][ T4337] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 81.135936][ T4330] loop3: detected capacity change from 0 to 40427 [ 81.164467][ T4259] Bluetooth: hci5: command 0x1009 tx timeout [ 81.234426][ T4337] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 81.336316][ T4337] EXT4-fs (loop1): This should not happen!! Data will be lost [ 81.336316][ T4337] [ 83.014384][ T4379] syz.3.19[4379] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.015094][ T4379] syz.3.19[4379] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.179561][ T4380] device batadv_slave_1 entered promiscuous mode [ 84.864262][ T4378] device batadv_slave_1 left promiscuous mode [ 86.057856][ T4397] loop0: detected capacity change from 0 to 512 [ 86.581095][ T4397] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 86.593178][ T4397] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.170766][ T7] cfg80211: failed to load regulatory.db [ 87.978374][ T4404] overlayfs: failed index dir cleanup (-512) [ 87.985128][ T4404] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 89.571490][ T4419] serio: Serial port ttynull [ 89.827898][ T4427] loop0: detected capacity change from 0 to 256 [ 90.101281][ T4437] loop2: detected capacity change from 0 to 512 [ 90.241462][ T4437] EXT4-fs (loop2): Ignoring removed nobh option [ 90.254197][ T4409] netlink: 44 bytes leftover after parsing attributes in process `syz.1.28'. [ 90.274711][ T4437] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 90.290248][ T4409] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 90.325736][ T4437] EXT4-fs (loop2): orphan cleanup on readonly fs [ 90.357664][ T4437] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 90.409276][ T4437] EXT4-fs (loop2): Remounting filesystem read-only [ 90.449294][ T4437] Quota error (device loop2): write_blk: dquota write failed [ 90.458299][ T4437] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 90.468796][ T4437] EXT4-fs error (device loop2): ext4_acquire_dquot:6207: comm syz.2.40: Failed to acquire dquot type 0 [ 90.487074][ T4437] EXT4-fs (loop2): Remounting filesystem read-only [ 90.495747][ T4437] EXT4-fs (loop2): 1 truncate cleaned up [ 90.510121][ T4437] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,noblock_validity,nolazytime,journal_dev=0x0000000000000d41,nogrpid,nobh,errors=remount-ro,noinit_itable,min_batch_time=0x00000000000000012. Quota mode: writeback. [ 92.070019][ T4455] xt_CT: You must specify a L4 protocol and not use inversions on it [ 92.765075][ T4465] netlink: 96 bytes leftover after parsing attributes in process `syz.0.47'. [ 94.699869][ T4468] loop4: detected capacity change from 0 to 1024 [ 94.816578][ T4477] loop3: detected capacity change from 0 to 256 [ 94.841189][ T4468] ======================================================= [ 94.841189][ T4468] WARNING: The mand mount option has been deprecated and [ 94.841189][ T4468] and is ignored by this kernel. Remove the mand [ 94.841189][ T4468] option from the mount to silence this warning. [ 94.841189][ T4468] ======================================================= [ 94.894579][ T4478] tmpfs: Unknown parameter 'â' [ 94.933320][ T4483] loop0: detected capacity change from 0 to 128 [ 94.977054][ T26] audit: type=1800 audit(1756104107.647:6): pid=4483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.53" name="file2" dev="loop0" ino=1048592 res=0 errno=0 [ 94.999627][ T4483] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 95.007742][ T4483] FAT-fs (loop0): Filesystem has been set read-only [ 95.014624][ T4483] attempt to access beyond end of device [ 95.014624][ T4483] loop0: rw=524288, want=2073, limit=128 [ 95.026074][ T4483] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 95.034070][ T4483] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 95.043852][ T4483] attempt to access beyond end of device [ 95.043852][ T4483] loop0: rw=0, want=2073, limit=128 [ 95.055814][ T4483] attempt to access beyond end of device [ 95.055814][ T4483] loop0: rw=0, want=2073, limit=128 [ 95.066787][ T4483] attempt to access beyond end of device [ 95.066787][ T4483] loop0: rw=0, want=2073, limit=128 [ 95.077765][ T4483] attempt to access beyond end of device [ 95.077765][ T4483] loop0: rw=0, want=2073, limit=128 [ 95.088684][ T4483] attempt to access beyond end of device [ 95.088684][ T4483] loop0: rw=0, want=2073, limit=128 [ 95.099555][ T4483] attempt to access beyond end of device [ 95.099555][ T4483] loop0: rw=0, want=2073, limit=128 [ 95.110430][ T4483] attempt to access beyond end of device [ 95.110430][ T4483] loop0: rw=0, want=2073, limit=128 [ 95.121472][ T4483] attempt to access beyond end of device [ 95.121472][ T4483] loop0: rw=0, want=2073, limit=128 [ 95.132565][ T4483] attempt to access beyond end of device [ 95.132565][ T4483] loop0: rw=0, want=2073, limit=128 [ 96.113614][ T4493] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 96.119722][ T4468] EXT4-fs: error -4 creating inode table initialization thread [ 96.123215][ T4493] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 96.139264][ T26] audit: type=1800 audit(1756104108.787:7): pid=4493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.56" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 96.140485][ T4493] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 96.191455][ T4468] EXT4-fs (loop4): mount failed [ 98.372674][ T4534] loop2: detected capacity change from 0 to 512 [ 98.545272][ T4534] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 98.584462][ T4534] EXT4-fs (loop2): invalid journal inode [ 98.591486][ T4534] EXT4-fs (loop2): can't get journal size [ 98.720096][ T4534] EXT4-fs (loop2): 1 truncate cleaned up [ 98.760136][ T4534] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,max_batch_time=0x0000000000000003,,errors=continue. Quota mode: none. [ 99.057556][ T4543] loop1: detected capacity change from 0 to 4096 [ 99.120389][ T4543] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 99.175922][ T4543] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,nodioread_nolock,auto_da_alloc,grpid,nodelalloc,noinit_itable,dioread_nolock,,errors=continue. Quota mode: writeback. [ 100.549083][ T4555] netlink: 96 bytes leftover after parsing attributes in process `syz.2.72'. [ 100.663460][ T4555] loop2: detected capacity change from 0 to 2048 [ 102.643739][ T4555] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 107.818519][ T4612] syz.4.80 (4612) used greatest stack depth: 18592 bytes left [ 108.436654][ T4616] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 108.847123][ T4608] loop1: detected capacity change from 0 to 256 [ 109.985605][ T4608] FAT-fs (loop1): bogus number of FAT sectors [ 110.026182][ T4608] FAT-fs (loop1): Can't find a valid FAT filesystem [ 110.186569][ T4634] loop0: detected capacity change from 0 to 256 [ 110.291352][ T4629] loop3: detected capacity change from 0 to 128 [ 110.376389][ T4634] FAT-fs (loop0): Directory bread(block 64) failed [ 110.446197][ T4634] FAT-fs (loop0): Directory bread(block 65) failed [ 110.460240][ T4629] FAT-fs (loop3): Unrecognized mount option "s¤îß.Yhortnaÿ" or missing value [ 110.509380][ T4634] FAT-fs (loop0): Directory bread(block 66) failed [ 110.515980][ T4634] FAT-fs (loop0): Directory bread(block 67) failed [ 110.522865][ T4634] FAT-fs (loop0): Directory bread(block 68) failed [ 110.529585][ T4634] FAT-fs (loop0): Directory bread(block 69) failed [ 110.619568][ T4641] loop1: detected capacity change from 0 to 512 [ 110.629120][ T4634] FAT-fs (loop0): Directory bread(block 70) failed [ 110.635731][ T4634] FAT-fs (loop0): Directory bread(block 71) failed [ 110.674308][ T4641] EXT4-fs (loop1): Ignoring removed oldalloc option [ 110.697729][ T4634] FAT-fs (loop0): Directory bread(block 72) failed [ 110.699549][ T4641] EXT4-fs (loop1): inline encryption not supported [ 110.710919][ T4641] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 110.718980][ T4641] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 110.733320][ T4634] FAT-fs (loop0): Directory bread(block 73) failed [ 111.542752][ T4316] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 111.681852][ T4652] IPv6: sit1: Disabled Multicast RS [ 111.769243][ T4641] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.96: bg 0: block 64: padding at end of block bitmap is not set [ 111.804057][ T4654] loop0: detected capacity change from 0 to 1024 [ 111.821045][ T4316] usb 3-1: Using ep0 maxpacket: 32 [ 111.830713][ T4641] Quota error (device loop1): write_blk: dquota write failed [ 111.838317][ T4641] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 111.879971][ T4641] EXT4-fs error (device loop1): ext4_acquire_dquot:6207: comm syz.1.96: Failed to acquire dquot type 0 [ 112.185940][ T4641] EXT4-fs (loop1): 1 truncate cleaned up [ 112.203296][ T4654] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000000a,grpquota,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 112.230153][ T4641] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,oldalloc,inlinecrypt,delalloc,mblk_io_submit,delalloc,noload,mb_optimize_scan=0x0000000000000001,lazytime,,errors=continue. Quota mode: writeback. [ 114.538727][ T4316] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 114.579848][ T4316] usb 3-1: can't read configurations, error -71 [ 114.780506][ T4676] loop2: detected capacity change from 0 to 1024 [ 115.831363][ T4691] loop1: detected capacity change from 0 to 256 [ 115.968736][ T4291] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 116.152066][ T4676] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 116.165697][ T4676] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 116.179153][ T4676] EXT4-fs (loop2): can't mount with both data=journal and delalloc [ 116.408795][ T4291] usb 5-1: Using ep0 maxpacket: 16 [ 117.187204][ T4691] FAT-fs (loop1): Directory bread(block 64) failed [ 117.193858][ T4691] FAT-fs (loop1): Directory bread(block 65) failed [ 117.200521][ T4691] FAT-fs (loop1): Directory bread(block 66) failed [ 117.207072][ T4691] FAT-fs (loop1): Directory bread(block 67) failed [ 117.213720][ T4691] FAT-fs (loop1): Directory bread(block 68) failed [ 117.220322][ T4691] FAT-fs (loop1): Directory bread(block 69) failed [ 117.226904][ T4691] FAT-fs (loop1): Directory bread(block 70) failed [ 117.233467][ T4691] FAT-fs (loop1): Directory bread(block 71) failed [ 117.240093][ T4691] FAT-fs (loop1): Directory bread(block 72) failed [ 117.246632][ T4691] FAT-fs (loop1): Directory bread(block 73) failed [ 117.722729][ T4700] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 118.153518][ T4291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 118.205856][ T4291] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 118.225502][ T4291] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 118.235757][ T4291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.293747][ T4291] usb 5-1: config 0 descriptor?? [ 118.819467][ T4291] usbhid 5-1:0.0: can't add hid device: -71 [ 118.837429][ T4291] usbhid: probe of 5-1:0.0 failed with error -71 [ 119.138392][ T4291] usb 5-1: USB disconnect, device number 2 [ 119.735373][ T4726] loop0: detected capacity change from 0 to 256 [ 119.799282][ T4726] exfat: Unknown parameter 'keep_last_dots' [ 120.021443][ T4729] ODEBUG: Out of memory. ODEBUG disabled [ 120.873483][ T4702] loop3: detected capacity change from 0 to 40427 [ 121.032239][ T4291] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 121.767847][ T2237] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 121.861768][ T4740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.125'. [ 121.896162][ T4742] syz.4.126 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 121.922907][ T4291] usb 5-1: device descriptor read/all, error -71 [ 122.058780][ T2237] usb 2-1: Using ep0 maxpacket: 16 [ 122.388811][ T4189] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 122.391619][ T2237] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.407207][ T2237] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.589819][ T2237] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 122.654257][ T2237] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.814525][ T2237] usb 2-1: Product: syz [ 122.828496][ T4754] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 122.904096][ T2237] usb 2-1: Manufacturer: syz [ 122.975320][ T2237] usb 2-1: SerialNumber: syz [ 123.265721][ T4746] loop0: detected capacity change from 0 to 2048 [ 123.361236][ T4354] loop0: p1 < > p3 [ 123.379323][ T4354] loop0: p3 size 134217728 extends beyond EOD, truncated [ 123.398678][ T4189] usb 4-1: Using ep0 maxpacket: 8 [ 123.538986][ T4189] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 123.548339][ T4746] loop_reread_partitions: partition scan of loop0 () failed (rc=-16) [ 123.566210][ T4189] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.637649][ T4189] usb 4-1: config 0 descriptor?? [ 123.852732][ T2237] usb 2-1: skipping empty audio interface (v1) [ 124.347031][ T2237] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 124.399590][ T2237] usb 2-1: USB disconnect, device number 2 [ 124.433136][ T3561] loop0: p1 < > p3 [ 124.439503][ T3561] loop0: p3 size 134217728 extends beyond EOD, truncated [ 124.460974][ T4316] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 124.470287][ T4316] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 124.477784][ T4316] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 124.514609][ T4316] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 124.527792][ T4316] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 124.544625][ T4316] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 124.560039][ T4316] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 124.581780][ T4316] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 124.596275][ T4316] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 124.604322][ T4316] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 124.612144][ T4316] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 124.622619][ T4316] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 124.630661][ T4316] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 124.638176][ T4316] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 124.657112][ T4189] usb 4-1: string descriptor 0 read error: -71 [ 124.663642][ T4189] usb 4-1: Found UVC 0.00 device (2833:0201) [ 124.671496][ T4316] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 124.679442][ T4189] usb 4-1: No valid video chain found. [ 124.685060][ T4316] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 124.686143][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.697024][ T4189] usb 4-1: USB disconnect, device number 2 [ 124.714694][ T4316] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 124.739369][ T4316] hid-generic 0006:0004:0009.0001: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 124.774816][ T4512] udevd[4512]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 124.787606][ T4354] udevd[4354]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 125.098073][ T4778] fido_id[4778]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 126.643612][ T4789] loop2: detected capacity change from 0 to 1024 [ 126.863372][ T4789] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 128.377023][ T4815] device pim6reg1 entered promiscuous mode [ 128.619464][ T4826] loop1: detected capacity change from 0 to 1024 [ 128.644376][ T4820] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 128.662655][ T4820] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 128.684902][ T4828] loop4: detected capacity change from 0 to 512 [ 128.729158][ T4826] EXT4-fs (loop1): Ignoring removed nobh option [ 128.751707][ T4826] EXT4-fs (loop1): Ignoring removed bh option [ 128.798503][ T4826] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 128.884673][ T4828] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 128.909950][ T4828] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 129.064088][ T4828] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 129.273212][ T4826] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 129.587076][ T4828] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 129.704471][ T4828] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a043c01c, mo2=0102] [ 129.718765][ T4828] System zones: 0-2, 18-18, 34-34 [ 129.749935][ T4839] loop0: detected capacity change from 0 to 128 [ 129.757990][ T4828] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.155: iget: bad i_size value: 360287970189639680 [ 129.788042][ T4828] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.155: couldn't read orphan inode 15 (err -117) [ 129.823776][ T4828] EXT4-fs (loop4): mounted filesystem without journal. Opts: nolazytime,abort,lazytime,mblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: none. [ 129.933459][ T4839] FAT-fs (loop0): Directory bread(block 162) failed [ 129.953225][ T4839] FAT-fs (loop0): Directory bread(block 163) failed [ 129.962829][ T4839] FAT-fs (loop0): Directory bread(block 164) failed [ 129.975706][ T4839] FAT-fs (loop0): Directory bread(block 165) failed [ 130.340914][ T4839] FAT-fs (loop0): Directory bread(block 166) failed [ 130.342487][ T4839] FAT-fs (loop0): Directory bread(block 167) failed [ 130.344681][ T4839] FAT-fs (loop0): Directory bread(block 168) failed [ 130.347045][ T4839] FAT-fs (loop0): Directory bread(block 169) failed [ 130.771009][ T4839] FAT-fs (loop0): Directory bread(block 162) failed [ 130.897655][ T4839] FAT-fs (loop0): Directory bread(block 163) failed [ 130.991031][ T4839] handle_bad_sector: 5992 callbacks suppressed [ 130.991050][ T4839] attempt to access beyond end of device [ 130.991050][ T4839] loop0: rw=3, want=232, limit=128 [ 131.037536][ T4839] attempt to access beyond end of device [ 131.037536][ T4839] loop0: rw=2051, want=234, limit=128 [ 131.269410][ T4855] loop3: detected capacity change from 0 to 512 [ 131.770573][ T4855] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 131.778703][ T4855] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 131.811967][ T4855] EXT4-fs (loop3): 1 truncate cleaned up [ 131.817749][ T4855] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,grpjquota="errors=continue,noload,nombcache,usrjquota="errors=continue,errors=remount-ro,barrier,. Quota mode: writeback. [ 132.968926][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.975314][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.998359][ T4869] loop1: detected capacity change from 0 to 512 [ 134.271219][ T4898] loop4: detected capacity change from 0 to 256 [ 134.376561][ T4898] FAT-fs (loop4): Directory bread(block 64) failed [ 134.397680][ T4898] FAT-fs (loop4): Directory bread(block 65) failed [ 134.425325][ T4898] FAT-fs (loop4): Directory bread(block 66) failed [ 134.483648][ T4898] FAT-fs (loop4): Directory bread(block 67) failed [ 134.505208][ T4898] FAT-fs (loop4): Directory bread(block 68) failed [ 134.512122][ T4898] FAT-fs (loop4): Directory bread(block 69) failed [ 134.519058][ T4898] FAT-fs (loop4): Directory bread(block 70) failed [ 134.525799][ T4898] FAT-fs (loop4): Directory bread(block 71) failed [ 134.532839][ T4898] FAT-fs (loop4): Directory bread(block 72) failed [ 134.539804][ T4898] FAT-fs (loop4): Directory bread(block 73) failed [ 135.220087][ T4365] Bluetooth: hci5: Frame reassembly failed (-84) [ 137.255903][ T4331] Bluetooth: hci5: command 0x1003 tx timeout [ 137.278682][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 137.637795][ T4928] loop2: detected capacity change from 0 to 2048 [ 137.893003][ T4928] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier=0x0000000000000007,,errors=continue. Quota mode: none. [ 138.918338][ T4944] Zero length message leads to an empty skb [ 138.927908][ T4944] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 139.096408][ T4951] loop2: detected capacity change from 0 to 512 [ 139.174776][ T4951] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 139.213251][ T4951] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.190: bad orphan inode 15 [ 139.255936][ T4951] ext4_test_bit(bit=14, block=4) = 1 [ 139.261526][ T4951] is_bad_inode(inode)=0 [ 139.272838][ T4951] NEXT_ORPHAN(inode)=0 [ 139.276971][ T4951] max_ino=32 [ 139.282307][ T4951] i_nlink=1 [ 139.287430][ T4951] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,acl,noload,data_err=ignore,usrjquota="init_itable=0x0000000000000601,init_itable=0x0000000000000100,max_dir_size_kb=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 139.318134][ T4242] Bluetooth: hci5: command 0x1001 tx timeout [ 139.326140][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 139.345398][ T26] audit: type=1326 audit(1756104152.017:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4950 comm="syz.2.190" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f40f51eebe9 code=0x0 [ 139.652904][ T4967] loop0: detected capacity change from 0 to 128 [ 139.703785][ T4967] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 139.736501][ T4967] FAT-fs (loop0): FAT read failed (blocknr 255) [ 140.404040][ T4973] x_tables: duplicate underflow at hook 2 [ 140.503113][ T4975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.196'. [ 140.557348][ T4977] capability: warning: `syz.2.195' uses 32-bit capabilities (legacy support in use) [ 141.660388][ T4331] Bluetooth: hci5: command 0x1009 tx timeout [ 141.982457][ T4997] loop3: detected capacity change from 0 to 256 [ 142.262749][ T4997] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 142.288696][ T4997] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 142.329157][ T4997] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 142.350113][ T5003] loop1: detected capacity change from 0 to 256 [ 142.428741][ T5003] exFAT-fs (loop1): invalid boot record signature [ 142.435266][ T5003] exFAT-fs (loop1): failed to read boot sector [ 142.456527][ T5003] exFAT-fs (loop1): failed to recognize exfat type [ 142.742111][ T5019] loop2: detected capacity change from 0 to 128 [ 142.796722][ T5016] device wireguard0 entered promiscuous mode [ 142.825170][ T5019] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 142.850552][ T5019] FAT-fs (loop2): FAT read failed (blocknr 255) [ 143.602820][ T5023] x_tables: duplicate underflow at hook 2 [ 144.343316][ T5034] loop0: detected capacity change from 0 to 256 [ 147.140986][ T5055] netlink: 12 bytes leftover after parsing attributes in process `syz.4.217'. [ 147.325786][ T5057] loop4: detected capacity change from 0 to 1024 [ 147.375501][ T5057] EXT4-fs (loop4): Ignoring removed nobh option [ 147.408710][ T5057] EXT4-fs (loop4): Ignoring removed bh option [ 147.414866][ T5057] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 147.518065][ T5057] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 149.366198][ T5075] loop4: detected capacity change from 0 to 128 [ 149.868945][ T5075] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 149.878330][ T5075] FAT-fs (loop4): FAT read failed (blocknr 255) [ 150.201822][ T5079] x_tables: duplicate underflow at hook 2 [ 151.898812][ T7] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 152.061691][ T5100] loop1: detected capacity change from 0 to 128 [ 152.133053][ T5100] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 152.199071][ T5100] ext4 filesystem being mounted at /35/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 152.278963][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 152.304432][ T7] usb 3-1: New USB device found, idVendor=046d, idProduct=c22e, bcdDevice= 0.00 [ 152.339917][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.392590][ T7] usb 3-1: config 0 descriptor?? [ 152.428936][ T5095] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 152.704788][ T5098] netlink: 'syz.4.231': attribute type 2 has an invalid length. [ 153.690909][ T7] lg-g15 0003:046D:C22E.0002: hidraw0: USB HID v1.01 Device [HID 046d:c22e] on usb-dummy_hcd.2-1/input0 [ 153.714699][ T7] usb 3-1: USB disconnect, device number 4 [ 153.801108][ T5113] fido_id[5113]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 154.033922][ T5119] loop2: detected capacity change from 0 to 128 [ 154.105112][ T5119] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 154.155500][ T5119] FAT-fs (loop2): FAT read failed (blocknr 255) [ 154.263195][ T5104] loop3: detected capacity change from 0 to 40427 [ 154.479654][ T5104] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x1ffff [ 154.512328][ T5123] x_tables: duplicate underflow at hook 2 [ 154.528363][ T5104] F2FS-fs (loop3): invalid crc value [ 154.646775][ T5104] F2FS-fs (loop3): Found nat_bits in checkpoint [ 155.093195][ T5104] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 157.366489][ T5141] loop2: detected capacity change from 0 to 1024 [ 157.771601][ T5141] EXT4-fs (loop2): Ignoring removed bh option [ 158.469615][ T5141] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback. [ 159.094513][ T5164] loop4: detected capacity change from 0 to 512 [ 159.106431][ T5165] loop2: detected capacity change from 0 to 128 [ 159.139219][ T5164] EXT4-fs (loop4): Ignoring removed nobh option [ 159.200588][ T5164] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.251: iget: bad i_size value: 38620345925642 [ 159.243974][ T5165] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 159.316145][ T5165] FAT-fs (loop2): FAT read failed (blocknr 255) [ 159.337442][ T5164] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.251: couldn't read orphan inode 15 (err -117) [ 159.396217][ T5164] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 159.683572][ T5174] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.251: bg 0: block 5: invalid block bitmap [ 159.699047][ T5172] x_tables: duplicate underflow at hook 2 [ 159.716906][ T5174] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 440 with error 28 [ 159.735358][ T5174] EXT4-fs (loop4): This should not happen!! Data will be lost [ 159.735358][ T5174] [ 159.748286][ T5174] EXT4-fs (loop4): Total free blocks count 0 [ 159.798047][ T5174] EXT4-fs (loop4): Free/Dirty block details [ 159.804284][ T5174] EXT4-fs (loop4): free_blocks=0 [ 159.810924][ T5174] EXT4-fs (loop4): dirty_blocks=440 [ 159.816309][ T5174] EXT4-fs (loop4): Block reservation details [ 159.823037][ T5174] EXT4-fs (loop4): i_reserved_data_blocks=440 [ 159.860862][ T4365] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.927004][ T5169] chnl_net:caif_netlink_parms(): no params data found [ 160.175237][ T4365] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.265019][ T5161] loop3: detected capacity change from 0 to 40427 [ 160.367360][ T4365] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.162724][ T5161] F2FS-fs (loop3): Found nat_bits in checkpoint [ 161.197852][ T5169] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.215880][ T5169] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.228759][ T5161] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 161.269870][ T5169] device bridge_slave_0 entered promiscuous mode [ 161.398808][ T4250] Bluetooth: hci5: command 0x0409 tx timeout [ 161.414599][ T4365] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.450630][ T4187] attempt to access beyond end of device [ 161.450630][ T4187] loop3: rw=2049, want=45104, limit=40427 [ 161.486828][ T5169] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.507043][ T5169] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.528782][ T5179] loop4: detected capacity change from 0 to 40427 [ 161.547477][ T5169] device bridge_slave_1 entered promiscuous mode [ 161.666589][ T5169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.678510][ T5179] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 161.685321][ T5179] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 162.563963][ T5179] F2FS-fs (loop4): Found nat_bits in checkpoint [ 162.588270][ T5169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.609702][ T5198] loop2: detected capacity change from 0 to 512 [ 162.682312][ T5169] team0: Port device team_slave_0 added [ 162.702392][ T5179] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 162.702458][ T5198] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 162.712362][ T5169] team0: Port device team_slave_1 added [ 162.726240][ T5179] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 162.820722][ T5198] EXT4-fs (loop2): 1 truncate cleaned up [ 162.827965][ T5198] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,resuid=0x0000000000000000,stripe=0x0000000000000040,,errors=continue. Quota mode: none. [ 162.867939][ T5169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.876178][ T5169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.902673][ T5169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.955199][ T5169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.964789][ T5169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.067057][ T5169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.395974][ T5169] device hsr_slave_0 entered promiscuous mode [ 163.428243][ T5169] device hsr_slave_1 entered promiscuous mode [ 163.448953][ T5169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.468905][ T7] Bluetooth: hci5: command 0x041b tx timeout [ 163.471277][ T5169] Cannot create hsr debugfs directory [ 163.617998][ T5214] netlink: 36 bytes leftover after parsing attributes in process `syz.3.262'. [ 163.644410][ T5212] tap0: tun_chr_ioctl cmd 2147767506 [ 163.745143][ T5218] process 'syz.4.253' launched './file0' with NULL argv: empty string added [ 163.849715][ T5220] loop3: detected capacity change from 0 to 128 [ 163.962391][ T5220] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 164.009744][ T5220] FAT-fs (loop3): FAT read failed (blocknr 255) [ 164.345865][ T5169] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 164.384042][ T5232] x_tables: duplicate underflow at hook 2 [ 164.397525][ T5169] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 164.464624][ T5169] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 164.495879][ T5169] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 165.846548][ T4250] Bluetooth: hci5: command 0x040f tx timeout [ 165.952484][ T5169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.035877][ T4365] device hsr_slave_0 left promiscuous mode [ 166.055355][ T4365] device hsr_slave_1 left promiscuous mode [ 166.083321][ T4365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.105700][ T4365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.132404][ T4365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.157085][ T4365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.205803][ T4365] device bridge_slave_1 left promiscuous mode [ 166.219309][ T4365] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.447810][ T4185] attempt to access beyond end of device [ 166.447810][ T4185] loop4: rw=2049, want=45104, limit=40427 [ 166.454107][ T4365] device bridge_slave_0 left promiscuous mode [ 166.465358][ T4365] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.262100][ T4365] device veth1_macvtap left promiscuous mode [ 167.321213][ T4365] device veth0_macvtap left promiscuous mode [ 167.327358][ T4365] device veth1_vlan left promiscuous mode [ 167.337388][ T4365] device veth0_vlan left promiscuous mode [ 167.795598][ T5273] loop3: detected capacity change from 0 to 128 [ 168.076023][ T5273] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 168.087315][ T5273] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 168.629526][ T5279] loop4: detected capacity change from 0 to 1024 [ 168.698309][ T5279] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 168.799759][ T5279] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,bsddf,acl,nomblk_io_submit,debug_want_extra_isize=0x0000000000000080,jqfmt=vfsv1,nodelalloc,auto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 168.840704][ T4365] team0 (unregistering): Port device team_slave_1 removed [ 168.884383][ T4365] team0 (unregistering): Port device team_slave_0 removed [ 168.946904][ T5279] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2825: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 169.008009][ T4365] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.160192][ T13] Bluetooth: hci5: command 0x0419 tx timeout [ 169.345954][ T4365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.604386][ T4365] bond0 (unregistering): Released all slaves [ 169.693935][ T5273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.270'. [ 169.735928][ T5169] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.789764][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 169.819292][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 169.878287][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 169.909458][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 169.955211][ T4315] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.962421][ T4315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.009371][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 170.018361][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 170.027327][ T4315] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.034494][ T4315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.053240][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 170.068144][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 170.084947][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 170.095464][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 170.117924][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 170.147925][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 170.167821][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 170.199025][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 170.213373][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 170.236931][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 170.246036][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 170.254643][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 170.267692][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 170.278527][ T5288] bridge: RTM_NEWNEIGH with invalid ether address [ 170.492601][ T5298] loop2: detected capacity change from 0 to 1024 [ 170.611531][ T5298] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 170.645616][ T5298] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 170.668968][ T5298] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 170.828687][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 170.836315][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 171.023091][ T5169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.000298][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 173.016823][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 173.094771][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 173.111877][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 173.282691][ T5169] device veth0_vlan entered promiscuous mode [ 173.339251][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 173.364438][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 174.507077][ T5169] device veth1_vlan entered promiscuous mode [ 174.709258][ T5169] device veth0_macvtap entered promiscuous mode [ 174.720304][ T5169] device veth1_macvtap entered promiscuous mode [ 174.768144][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 174.793074][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 174.844942][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 174.885783][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 175.266347][ T5169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.334910][ T5169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.389198][ T5169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.452094][ T5169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.462106][ T5169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.472853][ T5169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.482786][ T5169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.493423][ T5169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.505558][ T5169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.515309][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 175.657424][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 176.236012][ T5369] loop2: detected capacity change from 0 to 512 [ 176.287091][ T5369] EXT4-fs (loop2): Ignoring removed nobh option [ 176.297356][ T5169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.308750][ T5169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.319181][ T5169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.329908][ T5169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.340030][ T5169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.350760][ T5169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.367719][ T5169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.400469][ T5169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.420488][ T5369] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.283: iget: bad i_size value: 38620345925642 [ 176.599020][ T5369] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.283: couldn't read orphan inode 15 (err -117) [ 176.622111][ T5169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.649431][ T5369] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 176.667993][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 176.697922][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 177.120772][ T5169] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.411449][ T5169] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.420639][ T5169] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.494805][ T5169] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.692721][ T5384] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.283: bg 0: block 5: invalid block bitmap [ 177.936429][ T5384] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1120 with error 28 [ 178.071552][ T5384] EXT4-fs (loop2): This should not happen!! Data will be lost [ 178.071552][ T5384] [ 178.103504][ T4366] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.455575][ T4366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.718756][ T5384] EXT4-fs (loop2): Total free blocks count 0 [ 178.724806][ T5384] EXT4-fs (loop2): Free/Dirty block details [ 178.743414][ T5384] EXT4-fs (loop2): free_blocks=0 [ 178.748420][ T5384] EXT4-fs (loop2): dirty_blocks=1140 [ 178.767512][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 178.781289][ T5384] EXT4-fs (loop2): Block reservation details [ 178.787346][ T5384] EXT4-fs (loop2): i_reserved_data_blocks=1140 [ 178.871356][ T5397] tipc: Started in network mode [ 178.876686][ T5397] tipc: Node identity 72178e0bd68d, cluster identity 4711 [ 178.919002][ T5397] tipc: Enabled bearer , priority 0 [ 178.960938][ T5398] device syzkaller0 entered promiscuous mode [ 178.980899][ T4347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.010510][ T4347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.030592][ T5394] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 1120 with max blocks 20 with error 28 [ 179.165382][ T5394] EXT4-fs (loop2): This should not happen!! Data will be lost [ 179.165382][ T5394] [ 179.889687][ C0] [ 179.892559][ C0] ============================= [ 179.897430][ C0] WARNING: suspicious RCU usage [ 179.902448][ C0] 5.15.189-syzkaller #0 Not tainted [ 179.907668][ C0] ----------------------------- [ 179.912591][ C0] net/sched/sch_api.c:304 suspicious rcu_dereference_protected() usage! [ 179.920976][ C0] [ 179.920976][ C0] other info that might help us debug this: [ 179.920976][ C0] [ 179.931280][ C0] [ 179.931280][ C0] rcu_scheduler_active = 2, debug_locks = 1 [ 179.939412][ C0] 6 locks held by ksoftirqd/0/14: [ 179.944462][ C0] #0: ffffc90000d37a80 ((&d->timer)){+.-.}-{0:0}, at: call_timer_fn+0xbb/0x530 [ 179.953741][ C0] #1: ffffffff8c11c360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 179.956377][ T5397] tipc: Resetting bearer [ 179.963172][ C0] #2: ffffffff8c11c3c0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 179.963301][ C0] #3: ffff88814704e108 (&sch->q.lock){+.-.}-{2:2}, at: __dev_queue_xmit+0xb8a/0x2ed0 [ 179.988442][ C0] #4: ffff88814704e148 (dev->qdisc_running_key ?: &qdisc_running_key){+...}-{0:0}, at: tipc_l2_send_msg+0x30a/0x3c0 [ 180.000941][ C0] #5: ffffffff8c11c360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 180.010375][ C0] [ 180.010375][ C0] stack backtrace: [ 180.016285][ C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Not tainted 5.15.189-syzkaller #0 [ 180.024374][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 180.034462][ C0] Call Trace: [ 180.037790][ C0] [ 180.040728][ C0] dump_stack_lvl+0x168/0x230 [ 180.045419][ C0] ? show_regs_print_info+0x20/0x20 [ 180.050654][ C0] ? lockdep_rcu_suspicious+0x110/0x180 [ 180.056294][ C0] qdisc_lookup+0xa6/0x650 [ 180.060712][ C0] qdisc_tree_reduce_backlog+0x190/0x430 [ 180.066352][ C0] fq_codel_enqueue+0x101a/0x1590 [ 180.071420][ C0] ? INET_ECN_set_ce+0x950/0x950 [ 180.076363][ C0] ? ktime_get+0x247/0x270 [ 180.080786][ C0] netem_dequeue+0xd39/0x1400 [ 180.085483][ C0] ? netem_enqueue+0x3720/0x3720 [ 180.090443][ C0] __qdisc_run+0x237/0x1480 [ 180.095099][ C0] __dev_queue_xmit+0xeb9/0x2ed0 [ 180.100090][ C0] ? dev_queue_xmit+0x20/0x20 [ 180.104789][ C0] ? tipc_crypto_xmit+0x1df/0x2660 [ 180.110281][ C0] ? mark_lock+0x94/0x320 [ 180.114727][ C0] ? eth_header+0x117/0x200 [ 180.119329][ C0] ? llc_sysctl_exit+0x60/0x60 [ 180.124101][ C0] tipc_l2_send_msg+0x30a/0x3c0 [ 180.129055][ C0] tipc_bearer_xmit_skb+0x292/0x3c0 [ 180.134255][ C0] ? tipc_bearer_min_mtu+0x190/0x190 [ 180.139561][ C0] tipc_disc_timeout+0x568/0x6b0 [ 180.144510][ C0] ? try_to_wake_up+0x6cf/0x1050 [ 180.149451][ C0] ? tipc_disc_create+0x920/0x920 [ 180.154620][ C0] ? tipc_disc_create+0x920/0x920 [ 180.159647][ C0] call_timer_fn+0x16c/0x530 [ 180.164241][ C0] ? tipc_disc_create+0x920/0x920 [ 180.169452][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 180.175476][ C0] ? __run_timers+0x7c0/0x7c0 [ 180.180167][ C0] ? rcu_is_watching+0x11/0xa0 [ 180.184938][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 180.190162][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 180.195448][ C0] ? tipc_disc_create+0x920/0x920 [ 180.200474][ C0] __run_timers+0x525/0x7c0 [ 180.204991][ C0] ? detach_timer+0x2b0/0x2b0 [ 180.209686][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 180.215674][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 180.220530][ C0] run_timer_softirq+0x63/0xf0 [ 180.225298][ C0] handle_softirqs+0x328/0x820 [ 180.230157][ C0] ? run_ksoftirqd+0x98/0xf0 [ 180.234753][ C0] ? do_softirq+0x200/0x200 [ 180.239257][ C0] ? run_ksoftirqd+0x75/0xf0 [ 180.244107][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 180.249302][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 180.254696][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 180.259894][ C0] run_ksoftirqd+0x98/0xf0 [ 180.264322][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 180.270023][ C0] smpboot_thread_fn+0x4f6/0x970 [ 180.275006][ C0] kthread+0x436/0x520 [ 180.279090][ C0] ? cpu_report_death+0x180/0x180 [ 180.284142][ C0] ? kthread_blkcg+0xd0/0xd0 [ 180.288795][ C0] ret_from_fork+0x1f/0x30 [ 180.293336][ C0] [ 180.301444][ T13] tipc: Node number set to 2761592331 [ 180.464700][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 180.554000][ T5396] tipc: Resetting bearer [ 180.579376][ T5396] tipc: Disabling bearer