last executing test programs: 8.415259314s ago: executing program 1 (id=94): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) close(0xffffffffffffffff) mincore(&(0x7f0000185000/0x3000)=nil, 0x3000, &(0x7f0000000240)=""/68) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000040)=0xfffffffb, 0x4) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000180)=0x1, 0x4) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40, 0x1) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000000c000000d1e2a3b909987ee77d6cbb14f6fa292a0c00000002000000000000000000000d000000000000"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r4, 0x20, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)=""/29, 0x1d}}, 0x10) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='kfree\x00', r8}, 0x18) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r9, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x4e23, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}) 7.859623219s ago: executing program 3 (id=98): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_proto_private(r0, 0x89e9, &(0x7f00000002c0)="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") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 6.917182112s ago: executing program 1 (id=107): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsmount(r0, 0x0, 0x20) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0xffb3, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000d) recvmsg(0xffffffffffffffff, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) 6.916785655s ago: executing program 4 (id=108): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) pause() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0xa94caa79e63b57}) close_range(r1, 0xffffffffffffffff, 0x0) 6.759142s ago: executing program 2 (id=109): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000380), 0x10) readv(r0, &(0x7f00000000c0)=[{&(0x7f00000003c0)=""/115, 0x73}], 0x1) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x2710], 0x80}}, 0x0) 6.531111178s ago: executing program 3 (id=111): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="050000009f6000"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000003"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8800) 5.607252694s ago: executing program 5 (id=112): socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$pppoe(0x18, 0x1, 0x0) pipe2(&(0x7f0000000040), 0x80000) prlimit64(0x0, 0x7, &(0x7f00000000c0)={0x8, 0x87}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) 5.482819364s ago: executing program 3 (id=113): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) mq_unlink(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0xb, &(0x7f0000000280)=ANY=[@ANYRES16], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}], 0x48}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x50, 0x10, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491}}, {0x4, 0x1b}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x10000}, 0x18) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r9, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) ioctl$KDSKBENT(r6, 0x4b47, &(0x7f0000000400)={0x0, 0x2, 0x6}) 5.41346287s ago: executing program 1 (id=114): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x3}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r1, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r2, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) 5.413163082s ago: executing program 2 (id=115): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100000002) 5.375056312s ago: executing program 4 (id=116): msgget(0x2, 0x60c) 5.126933107s ago: executing program 5 (id=117): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x0, 0x0, 0xfffffffd, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x6}}}}]}]}, 0x70}}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='netlink_extack\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) 5.027151201s ago: executing program 2 (id=119): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='c ', @ANYRESOCT], 0xa) 4.993599758s ago: executing program 4 (id=120): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 4.92645247s ago: executing program 1 (id=121): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='attr/exec\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r2 = syz_io_uring_setup(0x2e3b, &(0x7f0000000440)={0x0, 0x482b, 0x10100, 0x1}, &(0x7f0000000400)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/9, 0x9}], 0x1}) io_uring_enter(r2, 0x567, 0xa1ff, 0x0, 0x0, 0x0) 4.912570685s ago: executing program 3 (id=122): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$sock_TIOCINQ(r0, 0x541b, 0x0) 4.726945185s ago: executing program 2 (id=123): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_proto_private(r0, 0x89e9, &(0x7f00000002c0)="76bc39aa701ac4c79bf54104fea9e96657f1311f30a942c3206fa1c55d3686fc6c24d73024a0f89be78bcc1f8bdd46e4f268c54a679824db1dcf8f74c3b23e36d697425c5f2df7f98dbef3b7ec1780e14501a3d4e9470e2185de6116cea14946caf6d981a9cd95001a917553f570e3726f2630551191a0854f7cff00805be62f64e4c54d5c2f0905366f55c99647111e5b857787d78c6c3dd018e6267406aa2a9a3752d7d20b7896253a9985879aa52c6842dd65dee6d16fd76fedb06c551af8d0a19e2c25ac5dfa63180810e4ee80c6925b17ae93834611630ace930246f21e052263e7f1dbe5909864654f9e5d2a06b2da7f6315c31835d880408969") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 4.677077139s ago: executing program 5 (id=124): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time={0x9e, 0xbdaf}, {0x10}, {0x4, 0x81}, @raw32={[0x5d, 0xbfff]}}, {0x3, 0x0, 0x0, 0x0, @tick=0x7, {}, {}, @raw8={"b97bd658dfa8873dd5243022"}}], 0x38) 4.665586037s ago: executing program 4 (id=125): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[], 0xe8}}, 0x0) 4.444094758s ago: executing program 1 (id=127): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x24020400) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x2, 0x5, 0xfffffffffffff001, 0xc, 0x1, 0x5, 0x3, 0x6c3}, &(0x7f0000000140)={0x5, 0xe, 0x8000000000000001, 0xce, 0x0, 0x800, 0x7ff, 0x3}, &(0x7f0000000300)={0x4, 0x401, 0x6dd0, 0x40, 0x1, 0x1, 0xfffffffffffffffc, 0xe7}, &(0x7f0000000380), &(0x7f0000000400)={&(0x7f00000003c0)={[0x9]}, 0x8}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) pipe2$9p(0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x80000e, &(0x7f0000000340)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@quota}, {@errors_remount}, {@barrier}]}, 0x3, 0x44a, &(0x7f0000000bc0)="$eJzs271vG2UYAPDn7CSlXyRU5aMfQKAgylfSpKV0YAGBxFAkJBjKGJK0CnUb1ASJVhEEhMqIKjGxIEYk/gImWBAwIbHCjipVKEsLk9HZd43t2E6dOnGpfz/p3Pe9O/d9nrt77ffujQPoW6PpSxKxKyL+iIjharV+h9HqPzdWlqb/WVmaTqJcfuvvpLLf9ZWl6XzX/H0788pAROGzJA40aXfh4qWzU6XS7IWsPr547v3xhYuXnp87N3Vm9szs+ckTJ44dnXjx+OQLXckzzev6/o/mD+57/Z0rb0yfuvLuL98lef4NeXTJaLuNT5bLXW6ut3bXlJOBHgZCR4rVbhqDlf4/HMVYPXnD8dqnPQ0O2FTlcrn8QOvNy2XgLpZEryMAeiP/ok/vf/Nli4Yed4RrL1dvgNK8b2RLdctAFLJ9Bhvub7tpNCJOLf/7dbrE5jyHAACo80M6/nmu2fivELXPhe7N5lBGIuK+iNgTEccjYm9E3B9R2ffBiHiow/YbJ0nWjn8KV2tr5aTDBtaRjv9eyua26sd/+egvRopZbXcl/8Hk9Fxp9kh2TA7H4La0PtGmjR9f/f2LVttqx3/pkrafjwWzOK4ObKt/z8zU4tTt5Fzr2icR+wca8j8ZlQm8fCYgPeT7ImL/BtuYe+bbg622rZ9/G12YZyp/E/FU9fwvR935X73Qkvbzk+P3RGn2yHh+Vaz162+X32zV/m3l3wXp+d/R9Pq/mf9IUjtfu9DJ//7V0+nr5T8/b3lPs9Hrfyh5u1IeytZ9OLW4eGEiYig5WQ26dv3k6nvzer5/mv/hQ837/55YPRIHIiK9iB+OiEci4tEs9sci4vGIONTmKPz8yhPvbTz/zZXmP9PR+V8tDEXjmuaF4tmfvq9rdKST/NPzf6xSOpytuZXPv1uJq9OrGQAAAP6vChGxK5LC2M1yoTA2Vv0b/r2xo1CaX1h89vT8B+dnqr8RGInBQv6ka7jmeehEdluf1ycb6kez58ZfFrdX6mPT86WZXicPfW5ni/6f+qvY6+iATef3WtC/9H/oX/o/9C/9H/pXk/6/vRdxAFuv2ff/xz2IA9h6Df3ftB/0Eff/0L820v99ZsDdoW1fHtq6OIAttbA91v+RvILCmkIU7ogwFDap0OtPJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgO74LwAA///lI+j0") r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x107fe, @empty, 0x2}, {0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x22}, 0x7}, r8, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r7, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r8}}, 0x18) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES64=r6, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) 4.403620898s ago: executing program 3 (id=128): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaa04000000aaaaaaaaaa080045"], 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 4.213178806s ago: executing program 5 (id=129): socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$pppoe(0x18, 0x1, 0x0) pipe2(&(0x7f0000000040), 0x80000) prlimit64(0x0, 0x7, &(0x7f00000000c0)={0x8, 0x87}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) 4.151249232s ago: executing program 0 (id=130): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, 0x0, 0x0) 3.949740954s ago: executing program 5 (id=131): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0x6, {0x4, 0xfffffffd, 0x8001, 0xfffffffb}}]}}}]}, 0x60}}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f00000008c0), 0x1, 0x512, &(0x7f0000000380)="$eJzs3d9rY1kdAPDvvW1mOzNdk1WRdcF1cVc6i07Sbt3dIqLriz4tqOv7WNu0lCZNadJ1Whbt4H8ggoJPPvki+AcIwzz4B8jAgL6ID6KiiM7og6DOlSQ3TidN2rrTNp3m84HTnHPvzf2ec0NO7o/TewMYWy9FxFsRMRERr0ZEMZ+e5in2uqm93IP77y21UxJZ9s5fk0jyab11tcuTEXE1f9tURHztyxHfTA7Gbe7sri/WatWtvFxp1TcrzZ3d62v1xdXqanVjfn7ujYU3F15fmM1yT9TOUi/zky99/vanv/W7G3++9u12tT73kShEXztOUrfphc626Glvo63TCDYCE3l7CqOuCAAAx9Lex/9gRHyis/9fjInO3lyfiVHUDAAAADgp2Rem499JRAYAAABcWGlETEeSlvOxANORppfycwMfjitprdFsfWqlsb2x3J4XUYpCurJWq87mY4VLUUja5bl8jG2v/FpfeT4inouI7xcvd8rlpUZtecTnPgAAAGBcXO07/v9HMe3kjzbg/wQAAACA86s0tAAAAABcFA75AQAA4OLrP/6/PaJ6AAAAAKfiK2+/3U5Z7/nXy+/ubK833r2+XG2ul+vbS+WlxtZmebXRWO3cs69+1PpqjcbmZ2Jj+2alVW22Ks2d3Rv1xvZG68baY4/ABgAAAM7Qcx+/8+skIvY+e7mTIr8PIMBj/jDqCgAnaWLUFQBGxl28YXwVRl0BYOSSI+YbvAMAAE+/mY8evP7fe/6/cwNwsRnrAwDjx/V/GF8FIwBhrKUR8YFu9plhywy9/v/L40bJsoi7xf1TnF8EAICzNd1JSVrOjwOmI03L5YhnI9JSFJKVtVp1Nj8++FWx8Ey7PNd5Z3LkmGEAAAAAAAAAAAAAAAAAAAAAAAAAoCvLksgAAACACy0i/VPSuZt/xEzxlen+8wOXkn8W44954Ufv/ODmYqu1Ndee/rfOs7wuRUTrh/n014Y+PgwAAAA4acne0Fnd4/T8de5MawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAGHhw/72lXjrLuH/5YkSUBsWfjKnO61QUIuLK35OY3Pe+JCImTiD+3q2IeH5Q/CQeZllWymvRHz+NiMunHL/U2TTD4189gfgwzu60+5+3Bn3/0nip8zr4+zeZpyc1vP9L88jPd/q5Qf3fswfWVh8Y44V7P6sMjX8r4oXJwf1Pr/9NhsR/+cDa/pVl2cEY3/j67u6w+NmPI2YG/v4kj8WqtOqblebO7vW1+uJqdbW6MT8/98bCmwuvL8xWVtZq1fzvwBjf+9jPHx7W/isD4v/2N93+97D2vzJspX3+c+/m/Q91s4VB8a+9PPD3dyqGxE/z375P5vn2/Jlefq+b3+/Fn9598bD2Lw/Z/kd9/teO2f5Xv/rd3x9zUQDgDDR3dtcXa7Xq1iGZqWMs8zRmfjF1Lqrxf2ay73Q/ufNSn/ebae+tPprSa9U5qNi+THZmsSbinDT5f5mRdksAAMApeLTTP+qaAAAAAAAAAAAAAAAAAAAAwPg6i9uJ9cfcG01TAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO9d8AAAD//ysA4A0=") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 2.95346042s ago: executing program 0 (id=132): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100000002) 2.703162305s ago: executing program 0 (id=133): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x3}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r1, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r2, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) 2.373464036s ago: executing program 0 (id=134): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = socket(0x2, 0x3, 0xff) sendmsg(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000180)}, 0x80) getresgid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000020017e9c0000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x11}, 0x2c) 613.45486ms ago: executing program 0 (id=135): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='c ', @ANYRESOCT], 0xa) 422.835503ms ago: executing program 3 (id=136): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='kmem_cache_free\x00', r1, 0x0, 0x8}, 0x18) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) 421.615167ms ago: executing program 2 (id=137): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x48, &(0x7f0000000980)=ANY=[@ANYBLOB="c57c"], 0x8) 405.521722ms ago: executing program 5 (id=138): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000ac0)=ANY=[@ANYBLOB], 0x5b0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x1, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x1b71e4fe246c3d3}, 0x80) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x84aa5000) mbind(&(0x7f0000188000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x1, 0x1) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 351.055324ms ago: executing program 1 (id=139): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000000000181100", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, 0x0, 0x0) getpid() openat$ptp0(0xffffffffffffff9c, 0x0, 0x80042, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x4}, @IFLA_BOND_USE_CARRIER={0x5}]}}}]}, 0x44}}, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 273.261165ms ago: executing program 4 (id=140): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x2000) close(r0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0x5452, &(0x7f00000001c0)) 190.568065ms ago: executing program 0 (id=141): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 119.915019ms ago: executing program 2 (id=142): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000c80)="93bffce623851797a8dc79018d7716840ffc6946a067f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb688db8aee2963a9a5c8b454270e3c084fd5232dd1e17566d440d9f479034f26806b25dcfc18c50ee6f365a1bd150cc423678f1ef69b0667c83d4f", 0xca}, {&(0x7f00000007c0)="02999344565d9c61d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e432bcb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc402189195e92dc1d73fce0d96439a53073df328509806e9", 0x7c}, {&(0x7f00000002c0)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c5f4a1c58625fe19516af43c9870c5b8191e23778abe7df2280d459b1651686a53ca52dce9570444c153f9c2903ae4c868074e89477bf6ed2ab648b0498ac8c0f90844ed9a26675199d5ff9b391c1dec077b5099cf9aecd1a9d94", 0xcd}, {&(0x7f0000000f00)="397d5f2e855cb2b0b1e61d3fe47dc3e798cf47cf", 0x14}], 0x4}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933", 0x7c}, {&(0x7f0000000180)="5be3b011e12323e4ab88c0472f0700000000000000e71ba62334303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59ee", 0x48}], 0x2}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 0s ago: executing program 4 (id=143): socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$pppoe(0x18, 0x1, 0x0) pipe2(&(0x7f0000000040), 0x80000) prlimit64(0x0, 0x7, &(0x7f00000000c0)={0x8, 0x87}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.38' (ED25519) to the list of known hosts. [ 81.333428][ T5820] cgroup: Unknown subsys name 'net' [ 81.487050][ T5820] cgroup: Unknown subsys name 'cpuset' [ 81.497199][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.071741][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.876522][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.901392][ T5846] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 87.902689][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.933434][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.943321][ T5846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 87.947836][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.952397][ T5846] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 87.959424][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.966146][ T5846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 87.974663][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.986967][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.996551][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.004431][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.012916][ T5854] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.014075][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.021474][ T5854] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 88.035223][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.038451][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.046224][ T5854] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.051099][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.056510][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.063970][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.072154][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.078871][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.088813][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.102892][ T5854] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.108855][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.112319][ T5854] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.124783][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.127168][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.073522][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 89.102857][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 89.136560][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 89.208075][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 89.219690][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 89.548636][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.556127][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.564116][ T5838] bridge_slave_0: entered allmulticast mode [ 89.571626][ T5838] bridge_slave_0: entered promiscuous mode [ 89.641222][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 89.684459][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.691655][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.699053][ T5838] bridge_slave_1: entered allmulticast mode [ 89.706568][ T5838] bridge_slave_1: entered promiscuous mode [ 89.731283][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.738755][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.746139][ T5835] bridge_slave_0: entered allmulticast mode [ 89.754312][ T5835] bridge_slave_0: entered promiscuous mode [ 89.761634][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.769296][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.776818][ T5837] bridge_slave_0: entered allmulticast mode [ 89.784341][ T5837] bridge_slave_0: entered promiscuous mode [ 89.849090][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.858448][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.866934][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.874679][ T5835] bridge_slave_1: entered allmulticast mode [ 89.882368][ T5835] bridge_slave_1: entered promiscuous mode [ 89.890867][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.898115][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.905330][ T5837] bridge_slave_1: entered allmulticast mode [ 89.913022][ T5837] bridge_slave_1: entered promiscuous mode [ 89.947600][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.954974][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.962462][ T5833] bridge_slave_0: entered allmulticast mode [ 89.969920][ T5833] bridge_slave_0: entered promiscuous mode [ 89.981391][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.077026][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.084369][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.091609][ T5833] bridge_slave_1: entered allmulticast mode [ 90.099764][ T5833] bridge_slave_1: entered promiscuous mode [ 90.113030][ T5846] Bluetooth: hci0: command tx timeout [ 90.125816][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.127737][ T5846] Bluetooth: hci1: command tx timeout [ 90.138678][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.164998][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.172670][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.179935][ T5832] bridge_slave_0: entered allmulticast mode [ 90.187607][ T5832] bridge_slave_0: entered promiscuous mode [ 90.194300][ T5846] Bluetooth: hci2: command tx timeout [ 90.198882][ T5840] Bluetooth: hci3: command tx timeout [ 90.199752][ T5843] Bluetooth: hci4: command tx timeout [ 90.205817][ T55] Bluetooth: hci5: command tx timeout [ 90.241243][ T5838] team0: Port device team_slave_0 added [ 90.266957][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.282650][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.289810][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.297857][ T5832] bridge_slave_1: entered allmulticast mode [ 90.305475][ T5832] bridge_slave_1: entered promiscuous mode [ 90.351415][ T5838] team0: Port device team_slave_1 added [ 90.375713][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.433613][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.447032][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.491044][ T5835] team0: Port device team_slave_0 added [ 90.516603][ T5837] team0: Port device team_slave_0 added [ 90.527372][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.541348][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.581026][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.588069][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.614438][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.628016][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.635073][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.661107][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.675304][ T5835] team0: Port device team_slave_1 added [ 90.683447][ T5837] team0: Port device team_slave_1 added [ 90.704639][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.711817][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.719337][ T5836] bridge_slave_0: entered allmulticast mode [ 90.726948][ T5836] bridge_slave_0: entered promiscuous mode [ 90.871138][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.879667][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.888989][ T5836] bridge_slave_1: entered allmulticast mode [ 90.899194][ T5836] bridge_slave_1: entered promiscuous mode [ 90.920088][ T5833] team0: Port device team_slave_0 added [ 90.948999][ T5833] team0: Port device team_slave_1 added [ 90.979982][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.987627][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.014166][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.027599][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.034683][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.060933][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.073701][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.080672][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.107020][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.121566][ T5832] team0: Port device team_slave_0 added [ 91.133979][ T5832] team0: Port device team_slave_1 added [ 91.192389][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.199440][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.226378][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.239550][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.247665][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.248344][ T52] cfg80211: failed to load regulatory.db [ 91.277012][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.375032][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.382015][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.408213][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.454776][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.461744][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.489515][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.505713][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.521064][ T5838] hsr_slave_0: entered promiscuous mode [ 91.531722][ T5838] hsr_slave_1: entered promiscuous mode [ 91.593228][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.600245][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.626794][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.640455][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.688440][ T5835] hsr_slave_0: entered promiscuous mode [ 91.695554][ T5835] hsr_slave_1: entered promiscuous mode [ 91.701889][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.709806][ T5835] Cannot create hsr debugfs directory [ 91.756008][ T5837] hsr_slave_0: entered promiscuous mode [ 91.764800][ T5837] hsr_slave_1: entered promiscuous mode [ 91.771074][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.778796][ T5837] Cannot create hsr debugfs directory [ 91.849222][ T5836] team0: Port device team_slave_0 added [ 91.884471][ T5833] hsr_slave_0: entered promiscuous mode [ 91.891213][ T5833] hsr_slave_1: entered promiscuous mode [ 91.897763][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.906008][ T5833] Cannot create hsr debugfs directory [ 91.937189][ T5836] team0: Port device team_slave_1 added [ 92.075195][ T5832] hsr_slave_0: entered promiscuous mode [ 92.081838][ T5832] hsr_slave_1: entered promiscuous mode [ 92.088633][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.097507][ T5832] Cannot create hsr debugfs directory [ 92.122294][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.129308][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.155301][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.168267][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.175431][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.201724][ T55] Bluetooth: hci1: command tx timeout [ 92.207337][ T5840] Bluetooth: hci0: command tx timeout [ 92.212211][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.272809][ T5840] Bluetooth: hci5: command tx timeout [ 92.278303][ T5840] Bluetooth: hci3: command tx timeout [ 92.284504][ T55] Bluetooth: hci4: command tx timeout [ 92.289959][ T55] Bluetooth: hci2: command tx timeout [ 92.556029][ T5836] hsr_slave_0: entered promiscuous mode [ 92.565187][ T5836] hsr_slave_1: entered promiscuous mode [ 92.571468][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.579199][ T5836] Cannot create hsr debugfs directory [ 92.959552][ T5835] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.990392][ T5835] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.018653][ T5835] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.039844][ T5835] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.090766][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.117129][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.140624][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.154170][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.239223][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.257190][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.280623][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.311349][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.436062][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.451818][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.469938][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.490373][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.515189][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.544158][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.620990][ T2929] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.628799][ T2929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.645080][ T2929] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.652314][ T2929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.723327][ T5832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.736683][ T5832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.773609][ T5832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.786980][ T5832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.835466][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.909948][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.004186][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.061748][ T2929] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.069034][ T2929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.132684][ T5836] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 94.154120][ T5836] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 94.166671][ T5836] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 94.190503][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.206318][ T5836] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 94.239258][ T2929] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.246550][ T2929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.275289][ T55] Bluetooth: hci0: command tx timeout [ 94.280772][ T55] Bluetooth: hci1: command tx timeout [ 94.321622][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.350330][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.357536][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.366455][ T55] Bluetooth: hci2: command tx timeout [ 94.371889][ T55] Bluetooth: hci3: command tx timeout [ 94.377468][ T5840] Bluetooth: hci4: command tx timeout [ 94.382696][ T55] Bluetooth: hci5: command tx timeout [ 94.430303][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.437641][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.480746][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.508316][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.576024][ T5838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.623676][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.631337][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.657595][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.685710][ T2929] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.693482][ T2929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.787551][ T5837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.838849][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.918658][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.925900][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.028393][ T2929] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.035663][ T2929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.231802][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.355731][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.374508][ T5835] veth0_vlan: entered promiscuous mode [ 95.388703][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.417816][ T3933] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.425012][ T3933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.468165][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.475430][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.506472][ T5835] veth1_vlan: entered promiscuous mode [ 95.528595][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.688461][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.731064][ T5835] veth0_macvtap: entered promiscuous mode [ 95.769557][ T5835] veth1_macvtap: entered promiscuous mode [ 95.836206][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.859341][ T5837] veth0_vlan: entered promiscuous mode [ 95.876632][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.889290][ T5838] veth0_vlan: entered promiscuous mode [ 95.925542][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.942010][ T5835] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.951634][ T5835] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.962020][ T5835] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.971182][ T5835] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.009467][ T5837] veth1_vlan: entered promiscuous mode [ 96.037186][ T5838] veth1_vlan: entered promiscuous mode [ 96.130825][ T5833] veth0_vlan: entered promiscuous mode [ 96.193857][ T5832] veth0_vlan: entered promiscuous mode [ 96.268894][ T5833] veth1_vlan: entered promiscuous mode [ 96.296384][ T5832] veth1_vlan: entered promiscuous mode [ 96.304460][ T5837] veth0_macvtap: entered promiscuous mode [ 96.321172][ T2929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.333601][ T2929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.348882][ T5837] veth1_macvtap: entered promiscuous mode [ 96.357977][ T55] Bluetooth: hci1: command tx timeout [ 96.363006][ T5840] Bluetooth: hci0: command tx timeout [ 96.432931][ T55] Bluetooth: hci4: command tx timeout [ 96.434474][ T5840] Bluetooth: hci3: command tx timeout [ 96.438383][ T55] Bluetooth: hci2: command tx timeout [ 96.444400][ T5843] Bluetooth: hci5: command tx timeout [ 96.472971][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.483116][ T5838] veth0_macvtap: entered promiscuous mode [ 96.508660][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.528100][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.541182][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.573953][ T5838] veth1_macvtap: entered promiscuous mode [ 96.590770][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.600719][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.603931][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.615755][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.630150][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.642116][ T5832] veth0_macvtap: entered promiscuous mode [ 96.663443][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.674562][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.684020][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.693338][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.711580][ T5832] veth1_macvtap: entered promiscuous mode [ 96.728792][ T5833] veth0_macvtap: entered promiscuous mode [ 96.829312][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.855190][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.868559][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.879297][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.895399][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.906939][ T5833] veth1_macvtap: entered promiscuous mode [ 96.915317][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.924465][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.943984][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.954166][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.964918][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.974911][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.985671][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.997492][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.037738][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.050774][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.065673][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.076753][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.086980][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.097949][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.109690][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.121222][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.140201][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.158819][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.170415][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.193311][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.205810][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.222036][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.235783][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.251567][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.264518][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.280254][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.311092][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.341417][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.356099][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.408041][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.430429][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.452618][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.463918][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.475014][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.492205][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.502048][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.520526][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.545928][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.605799][ T5832] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.619969][ T5832] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.642197][ T5832] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.655075][ T5832] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.711176][ T5838] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.721359][ T5838] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.731567][ T5838] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.740755][ T5838] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.774079][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.787935][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.798686][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.811360][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.957562][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.987507][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.127935][ T30] audit: type=1326 audit(1744517538.074:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5953 comm="syz.4.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f3f38d169 code=0x7ffc0000 [ 98.158637][ T30] audit: type=1326 audit(1744517538.074:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5953 comm="syz.4.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f3f38d169 code=0x7ffc0000 [ 98.184489][ T30] audit: type=1326 audit(1744517538.074:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5953 comm="syz.4.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f3f38d169 code=0x7ffc0000 [ 98.223391][ T5836] veth0_vlan: entered promiscuous mode [ 98.243604][ T30] audit: type=1326 audit(1744517538.074:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5953 comm="syz.4.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f3f38d169 code=0x7ffc0000 [ 98.286801][ T30] audit: type=1326 audit(1744517538.074:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5953 comm="syz.4.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f3f38d169 code=0x7ffc0000 [ 98.317550][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.331587][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.341790][ T30] audit: type=1326 audit(1744517538.074:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5953 comm="syz.4.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f3f38d169 code=0x7ffc0000 [ 98.383159][ T795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.391175][ T795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.395615][ T5836] veth1_vlan: entered promiscuous mode [ 98.410578][ T30] audit: type=1326 audit(1744517538.074:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5953 comm="syz.4.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f3f38d169 code=0x7ffc0000 [ 98.487038][ T30] audit: type=1326 audit(1744517538.074:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5953 comm="syz.4.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f3f38d169 code=0x7ffc0000 [ 98.547303][ T30] audit: type=1326 audit(1744517538.074:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5953 comm="syz.4.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f3f38d169 code=0x7ffc0000 [ 98.564178][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.605736][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.610607][ T30] audit: type=1326 audit(1744517538.094:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5953 comm="syz.4.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f3f38d169 code=0x7ffc0000 [ 98.668404][ T795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.691746][ T795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.744793][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.760662][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.824879][ T5836] veth0_macvtap: entered promiscuous mode [ 99.206836][ T2929] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.208557][ T5836] veth1_macvtap: entered promiscuous mode [ 99.230918][ T2929] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.584611][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.603337][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.611217][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.633979][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.672146][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.709188][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.727098][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.738081][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.747978][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.759050][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.769464][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.782930][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.795377][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.863813][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.909148][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.924264][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.937604][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.975046][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.008332][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.028854][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.052357][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.065352][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.091578][ T5985] loop3: detected capacity change from 0 to 512 [ 100.100813][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.124075][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.159125][ T5985] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 100.176456][ T5836] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.219891][ T5836] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.258059][ T5836] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.277831][ T5836] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.322754][ T5985] EXT4-fs error (device loop3): ext4_do_update_inode:5182: inode #16: comm syz.3.4: corrupted inode contents [ 100.340731][ T5985] EXT4-fs error (device loop3): ext4_dirty_inode:6074: inode #16: comm syz.3.4: mark_inode_dirty error [ 100.376258][ T5985] EXT4-fs error (device loop3): ext4_do_update_inode:5182: inode #16: comm syz.3.4: corrupted inode contents [ 100.380548][ T5992] sd 0:0:1:0: device reset [ 100.418988][ T5993] xt_hashlimit: size too large, truncated to 1048576 [ 100.449026][ T5985] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.4: mark_inode_dirty error [ 100.470014][ T5985] EXT4-fs error (device loop3): ext4_do_update_inode:5182: inode #16: comm syz.3.4: corrupted inode contents [ 100.491634][ T5985] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 100.504281][ T795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.541734][ T795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.550092][ T5985] EXT4-fs error (device loop3): ext4_do_update_inode:5182: inode #16: comm syz.3.4: corrupted inode contents [ 100.568324][ T5985] EXT4-fs error (device loop3): ext4_truncate:4254: inode #16: comm syz.3.4: mark_inode_dirty error [ 100.580469][ T5985] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 100.657730][ T5985] EXT4-fs (loop3): 1 truncate cleaned up [ 100.680991][ T3933] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 1 [ 100.738828][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.758317][ T5985] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.780311][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.790400][ T5985] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.916615][ T5982] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.4: Failed to acquire dquot type 1 [ 101.155545][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.167205][ T3933] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 1 [ 101.190067][ T6005] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.327629][ T6005] syz.0.24 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 101.665343][ T6014] Falling back ldisc for ttyS3. [ 101.839722][ T6020] loop2: detected capacity change from 0 to 512 [ 101.859104][ T6021] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6'. [ 101.887163][ T6020] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 101.999724][ T6020] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.034750][ T6029] netlink: 'syz.1.32': attribute type 10 has an invalid length. [ 102.056010][ T6020] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.116456][ T6032] netlink: 'syz.1.32': attribute type 10 has an invalid length. [ 102.116932][ T6029] batman_adv: batadv0: Adding interface: team0 [ 102.218563][ T6034] netlink: 'syz.3.33': attribute type 10 has an invalid length. [ 102.226444][ T6034] netlink: 40 bytes leftover after parsing attributes in process `syz.3.33'. [ 102.338213][ T6032] netlink: 2 bytes leftover after parsing attributes in process `syz.1.32'. [ 102.402824][ T6029] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.554706][ T6029] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 102.975943][ T6034] batadv0: entered promiscuous mode [ 102.981237][ T6034] batadv0: entered allmulticast mode [ 102.987747][ T6034] bridge0: port 3(batadv0) entered blocking state [ 102.995754][ T6034] bridge0: port 3(batadv0) entered disabled state [ 103.005417][ T6034] bridge0: port 3(batadv0) entered blocking state [ 103.012232][ T6034] bridge0: port 3(batadv0) entered forwarding state [ 103.024569][ T6035] batman_adv: batadv0: Adding interface: dummy0 [ 103.030859][ T6035] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.057813][ T6035] batman_adv: batadv0: Interface activated: dummy0 [ 103.073627][ T6036] batadv0: mtu less than device minimum [ 103.080984][ T6036] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 103.093201][ T6036] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 103.105229][ T6036] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 103.117238][ T6036] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 103.129261][ T6036] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 103.141276][ T6036] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 103.153259][ T6036] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 103.165282][ T6036] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 103.177304][ T6036] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 103.230356][ T6032] team0: entered promiscuous mode [ 103.245378][ T5837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.298149][ T6032] team_slave_0: entered promiscuous mode [ 103.299150][ T5935] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 103.304300][ T6032] team_slave_1: entered promiscuous mode [ 103.313779][ T5935] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 103.321903][ T6032] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.337343][ T6032] batman_adv: batadv0: Interface activated: team0 [ 103.344205][ T6032] batman_adv: batadv0: Interface deactivated: team0 [ 103.357286][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 103.357314][ T30] audit: type=1326 audit(1744517543.304:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6044 comm="syz.5.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8212f8d169 code=0x7ffc0000 [ 103.399763][ T6032] batman_adv: batadv0: Removing interface: team0 [ 103.440140][ T6032] bridge0: port 3(team0) entered blocking state [ 103.446825][ T30] audit: type=1326 audit(1744517543.304:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6044 comm="syz.5.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8212f8d169 code=0x7ffc0000 [ 103.446891][ T30] audit: type=1326 audit(1744517543.334:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6044 comm="syz.5.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f8212f8d169 code=0x7ffc0000 [ 103.446945][ T30] audit: type=1326 audit(1744517543.334:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6044 comm="syz.5.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8212f8d169 code=0x7ffc0000 [ 103.447001][ T30] audit: type=1326 audit(1744517543.334:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6044 comm="syz.5.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8212f8d169 code=0x7ffc0000 [ 103.447053][ T30] audit: type=1326 audit(1744517543.334:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6044 comm="syz.5.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f8212f8d169 code=0x7ffc0000 [ 103.447105][ T30] audit: type=1326 audit(1744517543.334:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6044 comm="syz.5.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8212f8d169 code=0x7ffc0000 [ 103.447156][ T30] audit: type=1326 audit(1744517543.334:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6044 comm="syz.5.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8212f8d169 code=0x7ffc0000 [ 103.496041][ T6049] loop4: detected capacity change from 0 to 1024 [ 103.631444][ T6032] bridge0: port 3(team0) entered disabled state [ 103.649574][ T6032] team0: entered allmulticast mode [ 103.673263][ T6032] team_slave_0: entered allmulticast mode [ 103.679089][ T6032] team_slave_1: entered allmulticast mode [ 103.716395][ T6049] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.737892][ T6032] bridge0: port 3(team0) entered blocking state [ 103.744449][ T6032] bridge0: port 3(team0) entered forwarding state [ 103.782922][ T6054] loop3: detected capacity change from 0 to 512 [ 103.927634][ T6054] EXT4-fs error (device loop3): ext4_do_update_inode:5182: inode #16: comm syz.3.38: corrupted inode contents [ 103.956031][ T6054] EXT4-fs error (device loop3): ext4_dirty_inode:6074: inode #16: comm syz.3.38: mark_inode_dirty error [ 103.990461][ T6054] EXT4-fs error (device loop3): ext4_do_update_inode:5182: inode #16: comm syz.3.38: corrupted inode contents [ 104.018186][ T6054] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.38: mark_inode_dirty error [ 104.030867][ T6054] EXT4-fs error (device loop3): ext4_do_update_inode:5182: inode #16: comm syz.3.38: corrupted inode contents [ 104.092745][ T6054] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 104.098989][ T6042] bridge0: entered promiscuous mode [ 104.135654][ T6042] bridge0: port 3(macvlan2) entered blocking state [ 104.148243][ T6054] EXT4-fs error (device loop3): ext4_do_update_inode:5182: inode #16: comm syz.3.38: corrupted inode contents [ 104.182574][ T6042] bridge0: port 3(macvlan2) entered disabled state [ 104.200524][ T6054] EXT4-fs error (device loop3): ext4_truncate:4254: inode #16: comm syz.3.38: mark_inode_dirty error [ 104.212480][ T6042] macvlan2: entered allmulticast mode [ 104.217900][ T6042] bridge0: entered allmulticast mode [ 104.238907][ T6054] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 104.263577][ T6042] macvlan2: left allmulticast mode [ 104.268756][ T6042] bridge0: left allmulticast mode [ 104.281076][ T6054] EXT4-fs (loop3): 1 truncate cleaned up [ 104.293886][ T13] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 104.308291][ T6054] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.309270][ T6042] bridge0: left promiscuous mode [ 104.328180][ T13] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 1 [ 104.342655][ T6054] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.397884][ T6054] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 104.415933][ T6054] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.38: Failed to acquire dquot type 1 [ 104.559679][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.685613][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.705117][ T13] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 1 [ 104.817779][ T6071] loop0: detected capacity change from 0 to 2048 [ 105.003604][ T6071] EXT4-fs (loop0): failed to initialize system zone (-117) [ 105.057268][ T6071] EXT4-fs (loop0): mount failed [ 105.333497][ T6075] loop1: detected capacity change from 0 to 8192 [ 106.589063][ T6119] bridge0: port 3(vlan2) entered blocking state [ 106.600071][ T6119] bridge0: port 3(vlan2) entered disabled state [ 106.662666][ T6119] vlan2: entered allmulticast mode [ 106.671488][ T6119] bridge0: entered allmulticast mode [ 106.697269][ T6119] vlan2: left allmulticast mode [ 106.711214][ T6119] bridge0: left allmulticast mode [ 107.520534][ T6147] xt_hashlimit: size too large, truncated to 1048576 [ 107.584121][ T6142] loop0: detected capacity change from 0 to 2048 [ 107.922194][ T6156] Zero length message leads to an empty skb [ 107.974164][ T6142] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.060217][ T6142] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 108.106778][ T6142] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28 [ 108.167106][ T6142] EXT4-fs (loop0): This should not happen!! Data will be lost [ 108.167106][ T6142] [ 108.215428][ T6142] EXT4-fs (loop0): Total free blocks count 0 [ 108.232296][ T6142] EXT4-fs (loop0): Free/Dirty block details [ 108.291606][ T6142] EXT4-fs (loop0): free_blocks=2415919104 [ 108.312299][ T6142] EXT4-fs (loop0): dirty_blocks=48 [ 108.372992][ T6142] EXT4-fs (loop0): Block reservation details [ 108.389010][ T6142] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 108.629456][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.631975][ T6166] capability: warning: `syz.5.81' uses 32-bit capabilities (legacy support in use) [ 108.811504][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 108.811529][ T30] audit: type=1326 audit(1744517548.754:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6167 comm="syz.2.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd70378d169 code=0x7ffc0000 [ 108.957408][ T30] audit: type=1326 audit(1744517548.794:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6167 comm="syz.2.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7fd70378d169 code=0x7ffc0000 [ 109.055321][ T30] audit: type=1326 audit(1744517548.794:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6167 comm="syz.2.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd70378d169 code=0x7ffc0000 [ 109.192774][ T30] audit: type=1326 audit(1744517548.794:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6167 comm="syz.2.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd70378d169 code=0x7ffc0000 [ 109.238660][ T6179] loop0: detected capacity change from 0 to 512 [ 109.288187][ T6179] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 109.351400][ T30] audit: type=1326 audit(1744517548.794:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6167 comm="syz.2.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd70378d169 code=0x7ffc0000 [ 109.417016][ T6186] loop5: detected capacity change from 0 to 128 [ 109.430427][ T6179] EXT4-fs (loop0): 1 truncate cleaned up [ 109.440845][ T6179] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.471742][ T30] audit: type=1326 audit(1744517548.794:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6167 comm="syz.2.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd70378d169 code=0x7ffc0000 [ 109.596616][ T30] audit: type=1326 audit(1744517548.794:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6167 comm="syz.2.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd70378d169 code=0x7ffc0000 [ 109.629543][ T6186] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 109.670537][ T30] audit: type=1326 audit(1744517548.804:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6167 comm="syz.2.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd70378d169 code=0x7ffc0000 [ 109.696906][ T6186] FAT-fs (loop5): Filesystem has been set read-only [ 109.742302][ T30] audit: type=1326 audit(1744517548.804:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6167 comm="syz.2.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd70378d169 code=0x7ffc0000 [ 109.776266][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.857033][ T30] audit: type=1326 audit(1744517548.804:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6167 comm="syz.2.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fd70378d169 code=0x7ffc0000 [ 110.036192][ T6194] syz.2.93 uses obsolete (PF_INET,SOCK_PACKET) [ 110.225054][ T6202] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 110.435952][ T6211] xt_hashlimit: size too large, truncated to 1048576 [ 110.586385][ T6217] net_ratelimit: 10 callbacks suppressed [ 110.586410][ T6217] dccp_close: ABORT with 348 bytes unread [ 111.432050][ T6227] loop0: detected capacity change from 0 to 512 [ 111.692983][ T6227] EXT4-fs error (device loop0): ext4_do_update_inode:5182: inode #16: comm syz.0.103: corrupted inode contents [ 111.740424][ T6227] EXT4-fs error (device loop0): ext4_dirty_inode:6074: inode #16: comm syz.0.103: mark_inode_dirty error [ 111.766632][ T6227] EXT4-fs error (device loop0): ext4_do_update_inode:5182: inode #16: comm syz.0.103: corrupted inode contents [ 112.002937][ T6250] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 112.128766][ T6227] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.103: mark_inode_dirty error [ 112.447552][ T6227] EXT4-fs error (device loop0): ext4_do_update_inode:5182: inode #16: comm syz.0.103: corrupted inode contents [ 112.580122][ T6227] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 112.693735][ T6227] EXT4-fs error (device loop0): ext4_do_update_inode:5182: inode #16: comm syz.0.103: corrupted inode contents [ 112.774796][ T6227] EXT4-fs error (device loop0): ext4_truncate:4254: inode #16: comm syz.0.103: mark_inode_dirty error [ 112.809649][ T6227] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 112.831598][ T6227] EXT4-fs (loop0): 1 truncate cleaned up [ 112.840342][ T6227] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.853666][ T6227] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.854217][ T13] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 1 [ 112.918181][ T6227] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.103: Failed to acquire dquot type 1 [ 112.935577][ T6255] netlink: 'syz.3.113': attribute type 13 has an invalid length. [ 112.951887][ T6255] netlink: 'syz.3.113': attribute type 27 has an invalid length. [ 113.131294][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.156766][ T6265] netlink: 28 bytes leftover after parsing attributes in process `syz.5.117'. [ 113.175033][ T5935] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:8: Failed to release dquot type 1 [ 113.223905][ T6265] netlink: 'syz.5.117': attribute type 7 has an invalid length. [ 113.257046][ T6265] netlink: 'syz.5.117': attribute type 8 has an invalid length. [ 113.298877][ T6265] netlink: 4 bytes leftover after parsing attributes in process `syz.5.117'. [ 113.433985][ T5926] kernel write not supported for file /56/attr/exec (pid: 5926 comm: kworker/0:5) [ 113.599362][ T6283] xt_hashlimit: size too large, truncated to 1048576 [ 113.640411][ T6286] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 113.640411][ T6286] program syz.5.124 not setting count and/or reply_len properly [ 114.318823][ T6305] loop1: detected capacity change from 0 to 512 [ 114.517145][ T6305] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 114.764144][ T6305] EXT4-fs error (device loop1): xattr_find_entry:333: inode #15: comm syz.1.127: corrupted xattr entries [ 114.824685][ T6305] EXT4-fs (loop1): Remounting filesystem read-only [ 114.834726][ T6305] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 114.848949][ T6305] EXT4-fs (loop1): 1 truncate cleaned up [ 114.882499][ T6305] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.312234][ T6310] loop5: detected capacity change from 0 to 512 [ 115.451608][ T6310] EXT4-fs error (device loop5): ext4_do_update_inode:5182: inode #16: comm syz.5.131: corrupted inode contents [ 115.529526][ T6310] EXT4-fs error (device loop5): ext4_dirty_inode:6074: inode #16: comm syz.5.131: mark_inode_dirty error [ 115.565860][ T6310] EXT4-fs error (device loop5): ext4_do_update_inode:5182: inode #16: comm syz.5.131: corrupted inode contents [ 115.600329][ T6310] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #16: comm syz.5.131: mark_inode_dirty error [ 115.629818][ T6310] EXT4-fs error (device loop5): ext4_do_update_inode:5182: inode #16: comm syz.5.131: corrupted inode contents [ 115.670646][ T6310] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 115.692510][ T6310] EXT4-fs error (device loop5): ext4_do_update_inode:5182: inode #16: comm syz.5.131: corrupted inode contents [ 115.731612][ T6310] EXT4-fs error (device loop5): ext4_truncate:4254: inode #16: comm syz.5.131: mark_inode_dirty error [ 115.797525][ T6310] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 115.828600][ T6310] EXT4-fs (loop5): 1 truncate cleaned up [ 115.859130][ T6310] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.137749][ T6310] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.167057][ T6310] __quota_error: 69 callbacks suppressed [ 116.167082][ T6310] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 117.143322][ T6310] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 117.162420][ T5895] IPVS: starting estimator thread 0... [ 117.178114][ T6310] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.131: Failed to acquire dquot type 1 [ 117.502469][ T6321] IPVS: using max 23 ests per chain, 55200 per kthread [ 117.844346][ T5836] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.853443][ T5838] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.909668][ T795] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 117.962395][ T795] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:5: Failed to release dquot type 1 [ 118.122210][ T5935] ------------[ cut here ]------------ [ 118.127973][ T5935] RTNL: assertion failed at ./include/net/netdev_lock.h (56) [ 118.136152][ T6331] netlink: 'syz.1.139': attribute type 10 has an invalid length. [ 118.148540][ T5935] WARNING: CPU: 0 PID: 5935 at ./include/net/netdev_lock.h:56 __linkwatch_sync_dev+0x30d/0x360 [ 118.159711][ T5935] Modules linked in: [ 118.164385][ T5935] CPU: 0 UID: 0 PID: 5935 Comm: kworker/u8:8 Not tainted 6.15.0-rc1-syzkaller-00308-gecd5d67ad602 #0 PREEMPT(full) [ 118.176812][ T5935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 118.187751][ T5935] Workqueue: bond0 bond_mii_monitor [ 118.193778][ T5935] RIP: 0010:__linkwatch_sync_dev+0x30d/0x360 [ 118.194504][ T6331] bridge0: port 3(team0) entered disabled state [ 118.199823][ T5935] Code: 7c fe ff ff e8 24 07 ce f7 c6 05 b9 8c 54 06 01 90 48 c7 c7 60 f3 50 8d 48 c7 c6 47 fc 66 8e ba 38 00 00 00 e8 84 28 8d f7 90 <0f> 0b 90 90 e9 4d fe ff ff 89 d9 80 e1 07 38 c1 0f 8c 19 fd ff ff [ 118.199871][ T5935] RSP: 0018:ffffc900041e7710 EFLAGS: 00010246 [ 118.207391][ T6331] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.227319][ T5935] RAX: 26851b32a388a700 RBX: 0000000000000000 RCX: ffff88802d9c0000 [ 118.233595][ T6331] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.240254][ T5935] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 118.262398][ T5935] RBP: 0000000000000000 R08: ffffffff81827952 R09: fffffbfff1d7a970 [ 118.270417][ T5935] R10: dffffc0000000000 R11: fffffbfff1d7a970 R12: 0000000000000000 [ 118.278576][ T5935] R13: dffffc0000000000 R14: ffff88805d45e008 R15: ffff88805d45e000 [ 118.286708][ T5935] FS: 0000000000000000(0000) GS:ffff888124f94000(0000) knlGS:0000000000000000 [ 118.295746][ T5935] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.302461][ T5935] CR2: 00007fd7039a7bac CR3: 0000000060cde000 CR4: 0000000000350ef0 [ 118.312606][ T5935] Call Trace: [ 118.315908][ T5935] [ 118.319073][ T5935] ? ethtool_op_get_link+0xd/0x60 [ 118.324193][ T5935] ethtool_op_get_link+0x15/0x60 [ 118.329151][ T5935] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 118.334844][ T5935] bond_check_dev_link+0x1fd/0x4b0 [ 118.340001][ T5935] ? __pfx_bond_check_dev_link+0x10/0x10 [ 118.345782][ T5935] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.351464][ T5935] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.357207][ T5935] bond_mii_monitor+0x49d/0x3170 [ 118.362273][ T5935] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.367974][ T5935] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.373723][ T5935] ? bond_mii_monitor+0x17f/0x3170 [ 118.378893][ T5935] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.384631][ T5935] ? do_raw_spin_unlock+0x13c/0x8b0 [ 118.389884][ T5935] ? __pfx_bond_mii_monitor+0x10/0x10 [ 118.395372][ T5935] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.401050][ T5935] ? register_lock_class+0x54/0x330 [ 118.406548][ T5935] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.412279][ T5935] ? __lock_acquire+0xad5/0xd80 [ 118.418469][ T5935] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.425254][ T5935] ? process_scheduled_works+0x9cb/0x18e0 [ 118.431037][ T5935] process_scheduled_works+0xac5/0x18e0 [ 118.436741][ T5935] ? __pfx_process_scheduled_works+0x10/0x10 [ 118.442849][ T5935] ? assign_work+0x367/0x3d0 [ 118.447280][ T30] audit: type=1326 audit(1744517558.364:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6338 comm="syz.5.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8212f8d169 code=0x7ffc0000 [ 118.447459][ T5935] worker_thread+0x870/0xd50 [ 118.474391][ T5935] ? __kthread_parkme+0x1a8/0x200 [ 118.479464][ T5935] ? __pfx_worker_thread+0x10/0x10 [ 118.484705][ T5935] kthread+0x7b9/0x940 [ 118.488826][ T5935] ? __pfx_worker_thread+0x10/0x10 [ 118.494153][ T5935] ? __pfx_kthread+0x10/0x10 [ 118.498798][ T5935] ? __pfx_kthread+0x10/0x10 [ 118.503501][ T5935] ? __pfx_kthread+0x10/0x10 [ 118.508135][ T5935] ? __pfx_kthread+0x10/0x10 [ 118.512895][ T5935] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.519886][ T5935] ? lockdep_hardirqs_on+0x9d/0x150 [ 118.526249][ T5935] ? __pfx_kthread+0x10/0x10 [ 118.530972][ T5935] ret_from_fork+0x4d/0x80 [ 118.535508][ T5935] ? __pfx_kthread+0x10/0x10 [ 118.540150][ T5935] ret_from_fork_asm+0x1a/0x30 [ 118.545094][ T5935] [ 118.548132][ T5935] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 118.555432][ T5935] CPU: 0 UID: 0 PID: 5935 Comm: kworker/u8:8 Not tainted 6.15.0-rc1-syzkaller-00308-gecd5d67ad602 #0 PREEMPT(full) [ 118.567616][ T5935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 118.577796][ T5935] Workqueue: bond0 bond_mii_monitor [ 118.583060][ T5935] Call Trace: [ 118.586358][ T5935] [ 118.589321][ T5935] dump_stack_lvl+0x241/0x360 [ 118.594051][ T5935] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.599306][ T5935] ? __pfx__printk+0x10/0x10 [ 118.603967][ T5935] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.609639][ T5935] ? vscnprintf+0x5d/0x90 [ 118.614007][ T5935] panic+0x349/0x880 [ 118.617939][ T5935] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.623614][ T5935] ? __warn+0x174/0x4d0 [ 118.627820][ T5935] ? __pfx_panic+0x10/0x10 [ 118.632303][ T5935] ? ret_from_fork_asm+0x1a/0x30 [ 118.637298][ T5935] __warn+0x344/0x4d0 [ 118.641332][ T5935] ? __linkwatch_sync_dev+0x30d/0x360 [ 118.646754][ T5935] report_bug+0x2b3/0x500 [ 118.651138][ T5935] ? __linkwatch_sync_dev+0x30d/0x360 [ 118.656560][ T5935] ? __linkwatch_sync_dev+0x30d/0x360 [ 118.661974][ T5935] ? __linkwatch_sync_dev+0x30f/0x360 [ 118.667382][ T5935] handle_bug+0x89/0x170 [ 118.671651][ T5935] exc_invalid_op+0x1a/0x50 [ 118.676174][ T5935] asm_exc_invalid_op+0x1a/0x20 [ 118.681029][ T5935] RIP: 0010:__linkwatch_sync_dev+0x30d/0x360 [ 118.687022][ T5935] Code: 7c fe ff ff e8 24 07 ce f7 c6 05 b9 8c 54 06 01 90 48 c7 c7 60 f3 50 8d 48 c7 c6 47 fc 66 8e ba 38 00 00 00 e8 84 28 8d f7 90 <0f> 0b 90 90 e9 4d fe ff ff 89 d9 80 e1 07 38 c1 0f 8c 19 fd ff ff [ 118.706651][ T5935] RSP: 0018:ffffc900041e7710 EFLAGS: 00010246 [ 118.712745][ T5935] RAX: 26851b32a388a700 RBX: 0000000000000000 RCX: ffff88802d9c0000 [ 118.720732][ T5935] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 118.728726][ T5935] RBP: 0000000000000000 R08: ffffffff81827952 R09: fffffbfff1d7a970 [ 118.736715][ T5935] R10: dffffc0000000000 R11: fffffbfff1d7a970 R12: 0000000000000000 [ 118.744697][ T5935] R13: dffffc0000000000 R14: ffff88805d45e008 R15: ffff88805d45e000 [ 118.752693][ T5935] ? __warn_printk+0x2a2/0x360 [ 118.757510][ T5935] ? ethtool_op_get_link+0xd/0x60 [ 118.762560][ T5935] ethtool_op_get_link+0x15/0x60 [ 118.767512][ T5935] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 118.773150][ T5935] bond_check_dev_link+0x1fd/0x4b0 [ 118.778291][ T5935] ? __pfx_bond_check_dev_link+0x10/0x10 [ 118.783948][ T5935] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.789606][ T5935] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.795265][ T5935] bond_mii_monitor+0x49d/0x3170 [ 118.800328][ T5935] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.805993][ T5935] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.811645][ T5935] ? bond_mii_monitor+0x17f/0x3170 [ 118.816788][ T5935] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.822443][ T5935] ? do_raw_spin_unlock+0x13c/0x8b0 [ 118.827683][ T5935] ? __pfx_bond_mii_monitor+0x10/0x10 [ 118.833083][ T5935] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.838729][ T5935] ? register_lock_class+0x54/0x330 [ 118.843948][ T5935] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.849611][ T5935] ? __lock_acquire+0xad5/0xd80 [ 118.854498][ T5935] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.860156][ T5935] ? process_scheduled_works+0x9cb/0x18e0 [ 118.865890][ T5935] process_scheduled_works+0xac5/0x18e0 [ 118.871482][ T5935] ? __pfx_process_scheduled_works+0x10/0x10 [ 118.877491][ T5935] ? assign_work+0x367/0x3d0 [ 118.882108][ T5935] worker_thread+0x870/0xd50 [ 118.886730][ T5935] ? __kthread_parkme+0x1a8/0x200 [ 118.891768][ T5935] ? __pfx_worker_thread+0x10/0x10 [ 118.896893][ T5935] kthread+0x7b9/0x940 [ 118.900984][ T5935] ? __pfx_worker_thread+0x10/0x10 [ 118.906116][ T5935] ? __pfx_kthread+0x10/0x10 [ 118.910726][ T5935] ? __pfx_kthread+0x10/0x10 [ 118.915334][ T5935] ? __pfx_kthread+0x10/0x10 [ 118.919938][ T5935] ? __pfx_kthread+0x10/0x10 [ 118.924550][ T5935] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.930209][ T5935] ? lockdep_hardirqs_on+0x9d/0x150 [ 118.935439][ T5935] ? __pfx_kthread+0x10/0x10 [ 118.940056][ T5935] ret_from_fork+0x4d/0x80 [ 118.944510][ T5935] ? __pfx_kthread+0x10/0x10 [ 118.949119][ T5935] ret_from_fork_asm+0x1a/0x30 [ 118.953908][ T5935] [ 118.957164][ T5935] Kernel Offset: disabled [ 118.961538][ T5935] Rebooting in 86400 seconds..