last executing test programs: 8.768951404s ago: executing program 2 (id=129): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="54010000100013070000000000000000fe880000000000000000000000000001ac1414bb000000001600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="200100000000000000000000000000020000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000400210000000000000048000200656362286369706865725f6e756c6c29"], 0x154}, 0x1, 0x0, 0x0, 0x1}, 0x0) 8.13729653s ago: executing program 2 (id=136): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000022020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00'}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd"], 0xfdef) 4.758255191s ago: executing program 2 (id=165): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sync() 3.686818489s ago: executing program 5 (id=182): r0 = io_uring_setup(0x6503, &(0x7f0000001300)={0x0, 0x0, 0x1046}) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) 3.593812965s ago: executing program 5 (id=184): clock_settime(0x300, 0x0) 3.373124229s ago: executing program 5 (id=185): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f00000000c0)) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)={0x14, r4, 0x333, 0x0, 0x0, {0x1c}}, 0x14}, 0x1, 0xa60d000000000000, 0x0, 0x40}, 0x0) syz_usb_disconnect(0xffffffffffffffff) 3.359500866s ago: executing program 0 (id=187): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = dup2(r1, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) openat2(0xffffffffffffff9c, 0x0, 0x0, 0x0) 3.264252492s ago: executing program 1 (id=188): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x6, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r2}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(r3) 3.128989958s ago: executing program 4 (id=190): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 2.84137406s ago: executing program 4 (id=192): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0xe) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x40, 0x7ffc0002}]}) semget(0x2, 0x3, 0x90) 2.841003515s ago: executing program 0 (id=193): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="64000000100003050000000000ffff0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800c0001006d6163766c616e00240002800800010010000000100005800a000400aaaaaaaaaa00000008000300030000000800"], 0x64}}, 0x0) 2.814585189s ago: executing program 1 (id=194): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010000020d3"]) 2.673744398s ago: executing program 0 (id=195): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x100000000000000}, 0x18) tkill(0x0, 0x7) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0xc903, &(0x7f0000000100)={[{@init_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}]}, 0x1, 0x4dc, &(0x7f0000000540)="$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") 2.548985629s ago: executing program 4 (id=197): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x639) readv(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x82602, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x24fc, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000001980)={{0x2000, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="7c030000190001000000000000000000ac1414bb00"/32, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a7000000000000000000000000000000020000000a0010000100000000000000e0000600ffffffff000000000000000000000000fe88000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d432000000ac14140e0000000000000000000000000100000000000000860000000080000009000000000000000000008000000000f60100000000000002000000000000000800000000000000090000000000000001000000010000000800000000000000daf600000000", @ANYRES32=0x0, @ANYBLOB="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"/467], 0x37c}}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) 2.40607335s ago: executing program 0 (id=198): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000100000009000000ae"], 0x48) bpf$MAP_CREATE(0xc00000000000000, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x0, r1, 0x1e, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 2.404651921s ago: executing program 3 (id=199): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00', @ANYRES16=r0, @ANYBLOB="0100000010651fbe347b2c2b00000c00018008000100", @ANYRES32=r3], 0x20}}, 0x0) 2.398890856s ago: executing program 1 (id=200): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum={0x3}]}, {0x0, [0x30, 0x30, 0x2e]}}, 0x0, 0x29, 0x0, 0x5, 0xffffffff, 0x0, @void, @value}, 0x28) 1.883576591s ago: executing program 5 (id=201): r0 = memfd_create(&(0x7f0000000280)='%\x00', 0x4) mmap(&(0x7f00007fd000/0x1000)=nil, 0x1000, 0x300000b, 0x21010, r0, 0x0) io_uring_setup(0x3eae, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x4002}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='bdi_dirty_ratelimit\x00'}, 0x10) gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r2 = socket(0x200000100000011, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 1.616156692s ago: executing program 3 (id=202): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x80000001, 0xfffffc00, 0x9, 0x400, 0x10001, 0x200}}}}]}, 0x4c}}, 0x44080) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xfff2, 0xa}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004054}, 0x4000) 1.561475347s ago: executing program 1 (id=203): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0, r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000180001000000000000000000020000000000ff"], 0x48}}, 0x0) 1.182532729s ago: executing program 2 (id=204): syz_read_part_table(0x59d, &(0x7f0000000000)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c000000"], 0x64}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 1.148582453s ago: executing program 4 (id=205): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x2, 0x2, 0x0, 0x3, 0x41}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xc}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f0000000000)=0x1) 1.116146085s ago: executing program 1 (id=206): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = getpid() sched_getparam(r1, &(0x7f0000001000)) 1.09438251s ago: executing program 3 (id=207): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01000100f300000000001f000000080002"], 0x1c}}, 0x0) 1.092081658s ago: executing program 5 (id=208): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x3000006, &(0x7f0000000040)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}, {@abort}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@nobh}, {@block_validity}, {@orlov}, {@user_xattr}, {@init_itable_val={'init_itable', 0x3d, 0x400}}]}, 0x1, 0x556, &(0x7f0000001100)="$eJzs3d1rW+UfAPDvSdu9/37rYAwVkcIunMyltvVlghfzUnQ40PsZ2rMymi6jScdaB24X7sYbGYKIA/Fe770c/gP+FQMtDBlFL7ypnPSky9akybL0ZebzgbM9zzknfc4353yfPCdPQgIYWGPZP4WIFyPi6yTiaNO24cg3jq3vt/rwxnS2JLG29smfSST5usb+Sf7/4bzyQkT8+mXE6cLmdqtLy3OlcjldyOvjtfmr49Wl5TOX50uz6Wx6ZXJq6uxbU5PvvvN232J97cLf331874OzX51c/fbnlWN3kjgXR/JtzXE8g5vNlbEYy5+TkTj3xI4TfWhsL0l2+wDoyVCe5yOR9QFHYyjPeuC/74uIWAMGVCL/YUA1xgGNe/s+3Qc/Nx68v34DtDn+4fX3RuJA/d7o0Gry2J1Rdr872of2szZ++ePunWyJ/r0PAdDRzVsRK0PDw5v7vyTv/3r3Rhf7PNmG/g92zr1s/PN6q/FPYWP8Ey3GP4db5G4vOud/YaUPzbSVjf/eazn+3Zi0Gh3Ka/+rj/lGkkuXy2nWt/0/Ik7FyP6svtV8ztnV+2vttjWP/7Ila78xFsyPY2V4/+OPmSnVSs8Sc7MHtyJeajn+TTbOf9Li/GfPx4Uu2ziR3n2l3bbO8W+vtR8jXm15/h/NaCVbz0+O16+H8cZVsdlft0/81q793Y4/O/+Hto5/NGmer60+fRs/HPgnbbet1+t/X/JpvbwvX3e9VKstTETsSz7avH7y0WMb9cb+WfynTm7d/7W6/g9GxGddxn/7+E8v9x7/9srin3mq8//0hfsffv59u/a7O/9v1kun8jXd9H/dHuCzPHcAAAAAAACw1xQi4kgkheJGuVAoFtc/33E8DhXKlWrt9KXK4pWZqH9XdjRGCo2Z7qNNn4eYyD8P26hPPlGfiohjEfHN0MF6vThdKc/sdvAAAAAAAAAAAAAAAAAAAACwRxxu8/3/zO9Du310wLbzk98wuDrmfz9+6QnYk7z+w+CS/zC45D8MLvkPg0v+w+DqkP/JTh0HsPO8/sPgkv8AAAAAAAAAAAAAAAAAAAAAAAAAAADQVxfOn8+WtdWHN6az+sy1pcW5yrUzM2l1rji/OF2crixcLc5WKrPltDhdme/098qVytWJyVi8Pl5Lq7Xx6tLyxfnK4pXaxcvzpdn0YjqyI1EBAAAAAAAAAAAAAAAAAADA86W6tDxXKpfTBQWFngrDe+MwFPpc2O2eCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe+TcAAP//Z7w5Vw==") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) munmap(&(0x7f00001f9000/0x3000)=nil, 0x3000) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1200, 0x0, 0x3) 701.555939ms ago: executing program 0 (id=209): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) 700.983089ms ago: executing program 3 (id=210): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x110, &(0x7f00000005c0)={0x0, 0xd7c8, 0x0, 0x10000}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 700.504916ms ago: executing program 1 (id=211): r0 = openat$vcsu(0xffffff9c, &(0x7f0000000200), 0x68a41, 0x0) write$binfmt_script(r0, 0x0, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$eJzs3U1vW1kZAODXzpeTyUwywywAAVOGgYKqOonbRlUXUFYIoUqILkFqQ+JGUew4ip3ShC7S/4BEJVaw5Aew7oo9GwQ7NmWBxEcEaiqxMLrXN6mb2k1oEjuKn0e6uvfcY/s9J849x36d+AQwsC5FxE5EjEbE/YiYys7nsi1ut7bkdi92Hy/u7T5ezEWzefefubQ+ORdt90m8lz1mISJ+9L2In+bejFvf2l5dqFTKG63i+Eyjuj5T39q+ulJdWC4vl9dKpfm5+dmb126UTq2vn1RHs6MvP//Dzrd+njRrMjvT3o/T1Or6yEGcxHBE/OAsgvXBUNaf0X43hHeSj4iPIuLT9PqfiqH02QQALrJmcyqaU+1lAOCiy6c5sFy+mOUCJiOfLxZbObyPYyJfqdUbVx7UNteWWrmy6RjJP1iplGezXOF0jOSS8lx6/KpcOlS+FhEfRsQvxsbTcnGxVlnq5wsfABhg7x2a//8z1pr/AYALrtDvBgAAPWf+B4DBY/4HgMFj/geAwWP+B4DBY/4HgMFj/geAgfLDO3eSrbmXff/10sOtzdXaw6tL5fpqsbq5WFysbawXl2u15fQ7e6pHPV6lVlufux6bj6a/vV5vzNS3tu9Va5trjXvp93rfK4/0pFcAwNt8+MmzP+ciYufWeLpF21oO5mq42PL9bgDQN0P9bgDQN1b7gsF1gvf40gNwQXRYovc1hYgYP3yy2Ww2z65JwBm7/AX5fxhUbfl/fwUMA0b+HwaX/D8MrmYzd9w1/+O4NwQAzjc5fqDL5/8fZfvfZh8O/GTp8C2enmWrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4HzbX/+3mK0FPhn5fLEY8X5ETMdI7sFKpTwbER9ExJ/GRsaS8lyf2wwAnFT+b7ls/a/LU59NHq4dzb0cS/cR8bNf3f3lo4VGY+OPyfl/HZxvPM3Ol/rRfgDgKPvzdLpveyP/Yvfx4v7Wy/b8/bsRUWjF39sdjb2D+MMxnO4LMRIRE//OZeWWXFvu4iR2nkTE5zv1PxeTaQ6ktfLp4fhJ7Pd7Gj//Wvx8WtfaJz+Lz51CW2DQPEvGn9udrr98XEr3na//QjpCnVw2/iUPtbiXjoGv4u+Pf0Ndxr9Lx41x/fffbx2Nv1n3JOKLwxH7sffaxp/9+Lku8T87Zvy/fOkrn3ara/464nJ0jt8ea6ZRXZ+pb21fXakuLJeXy2ul0vzc/OzNazdKM2mOeqb7bPCPW1c+6FaX9H+iS/zCEf3/+jH7/5v/3v/xV98S/5tf6xQ/Hx+/JX4yJ37jmPEXJn5X6FaXxF/q0v+jnv8rx4z//K/bbywbDgD0T31re3WhUilv9PJg/4VET4M6uAAHyW/NOWhGx4Pv9CrWaPxf92o23ylWtxHjNLJuwHlwcNFHxMt+NwYAAAAAAAAAAAAAAOioF/+x1O8+AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHH9LwAA//89fM7W") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r4, 0x0, 0x0, 0x20000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) write$P9_RSETATTR(r3, &(0x7f0000000a80)={0x7, 0x1b, 0x2}, 0x7) write$cgroup_int(r5, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000000)={0x0, r5}) 589.122099ms ago: executing program 0 (id=212): r0 = socket(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}]}, 0x88}}, 0x0) 406.258323ms ago: executing program 2 (id=213): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000980)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bind$packet(r0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 405.908916ms ago: executing program 4 (id=214): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) acct(0x0) 258.607915ms ago: executing program 3 (id=215): mkdir(&(0x7f0000002200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000180)='./file0\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) umount2(&(0x7f0000000680)='./file0\x00', 0x9) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, 0x0) 258.195946ms ago: executing program 4 (id=216): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20804}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44800) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 61.074298ms ago: executing program 3 (id=217): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x639) readv(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x82602, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x24fc, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000001980)={{0x2000, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="7c030000190001000000000000000000ac1414bb00"/32, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a7000000000000000000000000000000020000000a0010000100000000000000e0000600ffffffff000000000000000000000000fe88000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d432000000ac14140e0000000000000000000000000100000000000000860000000080000009000000000000000000008000000000f60100000000000002000000000000000800000000000000090000000000000001000000010000000800000000000000daf600000000", @ANYRES32=0x0, @ANYBLOB="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"/467], 0x37c}}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) 60.502427ms ago: executing program 2 (id=218): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000034004000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bff", 0xce}, {&(0x7f00000014c0)="dc9ebe30", 0x4}], 0x2}, 0x0) 0s ago: executing program 5 (id=219): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.16' (ED25519) to the list of known hosts. [ 67.239233][ T5829] cgroup: Unknown subsys name 'net' [ 67.334682][ T5829] cgroup: Unknown subsys name 'cpuset' [ 67.343268][ T5829] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.722872][ T5829] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.824311][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.831177][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.982949][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.010794][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.031920][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.080925][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.091257][ T5843] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.100890][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.138713][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.146564][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.154377][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.172258][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.179851][ T5846] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 73.187495][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.257905][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.270965][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.278457][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.305241][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.325954][ T5846] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 73.345144][ T5147] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.353632][ T5147] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.364373][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.386121][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.394258][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.402454][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.410035][ T5843] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 73.416340][ T5147] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.417704][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.424836][ T5147] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 73.441634][ T5860] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.448982][ T5147] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 73.456423][ T5147] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 73.460745][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.464508][ T5147] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 73.472495][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 73.478790][ T5147] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 73.487122][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.492436][ T5147] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 73.804773][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 73.845526][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 74.009745][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 74.136361][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.143832][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.151501][ T5844] bridge_slave_0: entered allmulticast mode [ 74.158336][ T5844] bridge_slave_0: entered promiscuous mode [ 74.168510][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.175770][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.183085][ T5844] bridge_slave_1: entered allmulticast mode [ 74.189929][ T5844] bridge_slave_1: entered promiscuous mode [ 74.197306][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 74.264603][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.271972][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.279216][ T5840] bridge_slave_0: entered allmulticast mode [ 74.286776][ T5840] bridge_slave_0: entered promiscuous mode [ 74.295100][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.303103][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.310269][ T5840] bridge_slave_1: entered allmulticast mode [ 74.318339][ T5840] bridge_slave_1: entered promiscuous mode [ 74.382846][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.399240][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 74.420931][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.430189][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.437772][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.445198][ T5848] bridge_slave_0: entered allmulticast mode [ 74.452212][ T5848] bridge_slave_0: entered promiscuous mode [ 74.459752][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.466993][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.474332][ T5848] bridge_slave_1: entered allmulticast mode [ 74.481393][ T5848] bridge_slave_1: entered promiscuous mode [ 74.489717][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.530338][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.573401][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.580524][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.590851][ T5850] bridge_slave_0: entered allmulticast mode [ 74.597578][ T5850] bridge_slave_0: entered promiscuous mode [ 74.609993][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.617334][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.624763][ T5850] bridge_slave_1: entered allmulticast mode [ 74.632316][ T5850] bridge_slave_1: entered promiscuous mode [ 74.651426][ T5840] team0: Port device team_slave_0 added [ 74.659524][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.672238][ T5844] team0: Port device team_slave_0 added [ 74.704048][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 74.716049][ T5840] team0: Port device team_slave_1 added [ 74.737793][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.748267][ T5844] team0: Port device team_slave_1 added [ 74.779237][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.791424][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.844472][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.851814][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.878313][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.945395][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.952454][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.978959][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.992531][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.999634][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.026120][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.039898][ T5848] team0: Port device team_slave_0 added [ 75.046521][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.053881][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.080466][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.107893][ T5850] team0: Port device team_slave_0 added [ 75.146811][ T5848] team0: Port device team_slave_1 added [ 75.174353][ T5850] team0: Port device team_slave_1 added [ 75.203119][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.210084][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.237250][ T5855] Bluetooth: hci0: command tx timeout [ 75.237530][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.248401][ T5855] Bluetooth: hci1: command tx timeout [ 75.283863][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.291125][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.298234][ T5851] bridge_slave_0: entered allmulticast mode [ 75.305699][ T5851] bridge_slave_0: entered promiscuous mode [ 75.314482][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.321707][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.328841][ T5851] bridge_slave_1: entered allmulticast mode [ 75.336020][ T5851] bridge_slave_1: entered promiscuous mode [ 75.343095][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.350061][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.376078][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.391948][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.399039][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.406720][ T5856] bridge_slave_0: entered allmulticast mode [ 75.413707][ T5856] bridge_slave_0: entered promiscuous mode [ 75.440017][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.447392][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.473463][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.484266][ T5855] Bluetooth: hci4: command tx timeout [ 75.484280][ T5147] Bluetooth: hci2: command tx timeout [ 75.490594][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.503136][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.529370][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.540979][ T5855] Bluetooth: hci5: command tx timeout [ 75.541014][ T5147] Bluetooth: hci3: command tx timeout [ 75.578442][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.585719][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.593290][ T5856] bridge_slave_1: entered allmulticast mode [ 75.600044][ T5856] bridge_slave_1: entered promiscuous mode [ 75.610147][ T5840] hsr_slave_0: entered promiscuous mode [ 75.616919][ T5840] hsr_slave_1: entered promiscuous mode [ 75.641536][ T5844] hsr_slave_0: entered promiscuous mode [ 75.647944][ T5844] hsr_slave_1: entered promiscuous mode [ 75.654257][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.662027][ T5844] Cannot create hsr debugfs directory [ 75.669438][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.681227][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.710517][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.744615][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.774463][ T5848] hsr_slave_0: entered promiscuous mode [ 75.782586][ T5848] hsr_slave_1: entered promiscuous mode [ 75.788751][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.796367][ T5848] Cannot create hsr debugfs directory [ 75.869649][ T5851] team0: Port device team_slave_0 added [ 75.885933][ T5850] hsr_slave_0: entered promiscuous mode [ 75.892875][ T5850] hsr_slave_1: entered promiscuous mode [ 75.899044][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.906825][ T5850] Cannot create hsr debugfs directory [ 75.914693][ T5856] team0: Port device team_slave_0 added [ 75.940303][ T5851] team0: Port device team_slave_1 added [ 75.963763][ T5856] team0: Port device team_slave_1 added [ 76.023465][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.030438][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.056825][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.069568][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.076742][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.102838][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.177107][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.184245][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.210870][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.223364][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.230314][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.256332][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.358755][ T5851] hsr_slave_0: entered promiscuous mode [ 76.365401][ T5851] hsr_slave_1: entered promiscuous mode [ 76.372169][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.379748][ T5851] Cannot create hsr debugfs directory [ 76.479212][ T5856] hsr_slave_0: entered promiscuous mode [ 76.485815][ T5856] hsr_slave_1: entered promiscuous mode [ 76.492090][ T5856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.499638][ T5856] Cannot create hsr debugfs directory [ 76.646903][ T5844] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.678317][ T5844] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.699188][ T5844] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.716890][ T5844] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.774901][ T5850] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 76.787837][ T5850] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 76.798327][ T5850] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 76.808292][ T5850] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.908061][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.918492][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.956200][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.992681][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.006479][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.015347][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.030189][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.039732][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.050282][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.150327][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.165373][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.173094][ T5851] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.182464][ T5851] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.210338][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.217578][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.236792][ T5851] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.265507][ T5851] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.285439][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.292557][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.301155][ T5855] Bluetooth: hci0: command tx timeout [ 77.306618][ T5147] Bluetooth: hci1: command tx timeout [ 77.336244][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.393463][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.400569][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.418634][ T5856] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 77.439114][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.457814][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.464974][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.481890][ T5856] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 77.492269][ T5856] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 77.503245][ T5856] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 77.540133][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.547204][ T5147] Bluetooth: hci4: command tx timeout [ 77.553383][ T5855] Bluetooth: hci2: command tx timeout [ 77.607014][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.621791][ T5855] Bluetooth: hci5: command tx timeout [ 77.627236][ T5147] Bluetooth: hci3: command tx timeout [ 77.654185][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.661594][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.683111][ T5850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.719079][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.726247][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.743945][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.765245][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.772367][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.838912][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.846064][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.975430][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.025478][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.075517][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.082790][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.094585][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.101780][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.134227][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.254468][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.270231][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.331920][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.396947][ T5844] veth0_vlan: entered promiscuous mode [ 78.416987][ T5844] veth1_vlan: entered promiscuous mode [ 78.461463][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.468693][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.487848][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.495018][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.509933][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.629306][ T5844] veth0_macvtap: entered promiscuous mode [ 78.658649][ T5844] veth1_macvtap: entered promiscuous mode [ 78.690601][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.708681][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.748061][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.791465][ T5840] veth0_vlan: entered promiscuous mode [ 78.798475][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.826331][ T5844] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.835852][ T5844] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.845261][ T5844] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.855667][ T5844] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.910219][ T5840] veth1_vlan: entered promiscuous mode [ 78.931796][ T5851] veth0_vlan: entered promiscuous mode [ 78.979192][ T5848] veth0_vlan: entered promiscuous mode [ 79.019025][ T5851] veth1_vlan: entered promiscuous mode [ 79.057244][ T5848] veth1_vlan: entered promiscuous mode [ 79.068506][ T5840] veth0_macvtap: entered promiscuous mode [ 79.090570][ T5850] veth0_vlan: entered promiscuous mode [ 79.112371][ T5840] veth1_macvtap: entered promiscuous mode [ 79.150383][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.161739][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.173262][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.197771][ T5850] veth1_vlan: entered promiscuous mode [ 79.227835][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.239027][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.250150][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.279502][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.288322][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.295946][ T5840] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.306201][ T5840] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.317007][ T5840] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.326054][ T5840] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.342563][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.380965][ T5147] Bluetooth: hci1: command tx timeout [ 79.386400][ T5147] Bluetooth: hci0: command tx timeout [ 79.395153][ T5851] veth0_macvtap: entered promiscuous mode [ 79.413891][ T5848] veth0_macvtap: entered promiscuous mode [ 79.446777][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.456644][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.461376][ T5848] veth1_macvtap: entered promiscuous mode [ 79.493771][ T5851] veth1_macvtap: entered promiscuous mode [ 79.537488][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.555742][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.566752][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.578042][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.603010][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.608227][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 79.622598][ T5850] veth0_macvtap: entered promiscuous mode [ 79.635237][ T5147] Bluetooth: hci4: command tx timeout [ 79.640760][ T5147] Bluetooth: hci2: command tx timeout [ 79.658549][ T5850] veth1_macvtap: entered promiscuous mode [ 79.701781][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.711115][ T5147] Bluetooth: hci3: command tx timeout [ 79.717620][ T5147] Bluetooth: hci5: command tx timeout [ 79.719745][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.733382][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.743917][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.756929][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.769017][ T5848] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.777903][ T5848] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.787210][ T5848] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.796445][ T5848] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.809383][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.824163][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.834572][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.851090][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.885877][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.907170][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.942634][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.953860][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.964359][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.976081][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.986932][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.997720][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.008282][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.023949][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.065633][ T5851] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.076217][ T5851] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.085784][ T5851] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.094822][ T5851] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.136312][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.149809][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.162595][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.178532][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.197552][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.209054][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.219218][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.238847][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.267318][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.339893][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.358313][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.381070][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.396737][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.407494][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.418205][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.429083][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.439810][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.449838][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.462777][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.474174][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.486559][ T5856] veth0_vlan: entered promiscuous mode [ 80.509917][ T5850] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.520243][ T5850] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.529193][ T5850] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.538022][ T5850] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.592080][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.600090][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.601939][ T5856] veth1_vlan: entered promiscuous mode [ 80.680110][ T1126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.689331][ T1126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.705253][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.721259][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.801897][ T29] audit: type=1326 audit(1732096631.258:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.2.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639cf7e759 code=0x7ffc0000 [ 80.855752][ T29] audit: type=1326 audit(1732096631.258:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.2.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f639cf7e759 code=0x7ffc0000 [ 80.878866][ T29] audit: type=1326 audit(1732096631.258:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.2.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639cf7e759 code=0x7ffc0000 [ 80.932005][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.939859][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.966354][ T5856] veth0_macvtap: entered promiscuous mode [ 80.978506][ T29] audit: type=1326 audit(1732096631.268:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.2.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639cf7e759 code=0x7ffc0000 [ 81.006438][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.028026][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.082273][ T5856] veth1_macvtap: entered promiscuous mode [ 81.111367][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.156230][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.245970][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.284408][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.304519][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.371115][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.404217][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.425106][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.433773][ T29] audit: type=1326 audit(1732096631.908:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.1.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcd37e759 code=0x7ffc0000 [ 81.442776][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.467147][ T5855] Bluetooth: hci0: command tx timeout [ 81.472916][ T5147] Bluetooth: hci1: command tx timeout [ 81.486860][ T29] audit: type=1326 audit(1732096631.908:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.1.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcd37e759 code=0x7ffc0000 [ 81.509132][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.532932][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.550732][ T29] audit: type=1326 audit(1732096631.938:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.1.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcfcd37e759 code=0x7ffc0000 [ 81.578723][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.588910][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.606954][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.617063][ T29] audit: type=1326 audit(1732096631.938:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.1.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcd37e759 code=0x7ffc0000 [ 81.653297][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.679646][ T29] audit: type=1326 audit(1732096631.938:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.1.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcd37e759 code=0x7ffc0000 [ 81.688234][ T5972] ieee802154 phy0 wpan0: encryption failed: -22 [ 81.708530][ T5147] Bluetooth: hci4: command tx timeout [ 81.714242][ T5855] Bluetooth: hci2: command tx timeout [ 81.781083][ T5147] Bluetooth: hci5: command tx timeout [ 81.786513][ T5147] Bluetooth: hci3: command tx timeout [ 81.804975][ T29] audit: type=1326 audit(1732096631.938:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.1.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcfcd37e759 code=0x7ffc0000 [ 81.837846][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.950703][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.967934][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.015770][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.070793][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.088664][ T5983] loop3: detected capacity change from 0 to 128 [ 82.112505][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.124490][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.149105][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.161903][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.179716][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.194418][ T5983] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 82.213574][ T5984] capability: warning: `syz.2.18' uses deprecated v2 capabilities in a way that may be insecure [ 82.226009][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.256324][ T5983] FAT-fs (loop3): Filesystem has been set read-only [ 82.282757][ T5983] syz.3.4: attempt to access beyond end of device [ 82.282757][ T5983] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 82.303940][ T5856] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.355045][ T5856] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.381235][ T5983] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 82.392938][ T5983] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 82.407252][ T5856] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.432305][ T5983] syz.3.4: attempt to access beyond end of device [ 82.432305][ T5983] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 82.473104][ T5856] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.591485][ T5995] loop1: detected capacity change from 0 to 512 [ 82.747950][ T5995] EXT4-fs (loop1): too many log groups per flexible block group [ 82.766275][ T5995] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 82.793189][ T5995] EXT4-fs (loop1): mount failed [ 82.808870][ T6002] netlink: 16 bytes leftover after parsing attributes in process `syz.4.25'. [ 82.986953][ T6005] loop2: detected capacity change from 0 to 512 [ 83.035035][ T6005] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 83.052738][ T6005] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 83.084129][ T6005] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 83.151875][ T6005] EXT4-fs (loop2): 1 truncate cleaned up [ 83.182415][ T6005] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.318049][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.376292][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.543898][ T6019] netlink: 708 bytes leftover after parsing attributes in process `syz.3.27'. [ 83.963292][ T1126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.019531][ T6005] EXT4-fs error (device loop2): ext4_xattr_inode_iget:440: comm syz.2.26: inode #1073372648: comm syz.2.26: iget: illegal inode # [ 84.083008][ T1126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.239585][ T6005] EXT4-fs error (device loop2): ext4_xattr_inode_iget:445: comm syz.2.26: error while reading EA inode 1073372648 err=-117 [ 84.269890][ T6005] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2977: inode #15: comm syz.2.26: corrupted xattr block 33: invalid header [ 84.390491][ T6024] netlink: 44 bytes leftover after parsing attributes in process `syz.0.33'. [ 84.417139][ T6029] netlink: 'syz.1.35': attribute type 10 has an invalid length. [ 84.488100][ T6005] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -117) [ 84.531331][ T6029] veth1_macvtap: left promiscuous mode [ 84.670873][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.897780][ T6032] loop0: detected capacity change from 0 to 8192 [ 85.006107][ T6046] IPv6: NLM_F_CREATE should be specified when creating new route [ 85.118971][ T6048] mmap: syz.3.44 (6048) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 85.251170][ T6055] netlink: 44 bytes leftover after parsing attributes in process `syz.2.48'. [ 85.567536][ T6071] tipc: Started in network mode [ 85.577335][ T6071] tipc: Node identity ac1414aa, cluster identity 4711 [ 85.589456][ T6071] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 85.596604][ T6071] tipc: Enabled bearer , priority 10 [ 85.686267][ T6065] Process accounting resumed [ 85.717672][ T5904] IPVS: starting estimator thread 0... [ 85.723977][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 85.755469][ T6065] Illegal XDP return value 4120459553 on prog (id 37) dev syz_tun, expect packet loss! [ 85.774080][ T6065] loop5: detected capacity change from 0 to 512 [ 85.781757][ T6065] ext4: Unknown parameter 'obj_role' [ 85.860854][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 85.881040][ T6081] IPVS: using max 16 ests per chain, 38400 per kthread [ 85.982363][ T25] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 86.000750][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 86.011009][ T6086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.58'. [ 86.022464][ T6090] loop3: detected capacity change from 0 to 1024 [ 86.069702][ T25] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 86.078006][ T6090] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.083009][ T25] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x3 [ 86.105237][ T25] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 86.140941][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 86.183115][ T963] cfg80211: failed to load regulatory.db [ 86.280836][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 86.296238][ T6099] loop5: detected capacity change from 0 to 2048 [ 86.312072][ T6090] EXT4-fs error (device loop3): ext4_xattr_inode_iget:440: inode #11: comm syz.3.61: missing EA_INODE flag [ 86.394871][ T6090] EXT4-fs (loop3): Remounting filesystem read-only [ 86.421167][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 86.486037][ T6099] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.537969][ T6112] netlink: 44 bytes leftover after parsing attributes in process `syz.4.66'. [ 86.560752][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 86.662059][ T5851] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.722147][ T5932] tipc: Node number set to 2886997162 [ 86.767370][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 86.767389][ T29] audit: type=1800 audit(1732096637.238:82): pid=6099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.63" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 86.773218][ T6118] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 86.840767][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 86.870141][ T6117] loop4: detected capacity change from 0 to 8192 [ 86.928352][ T25] IPVS: starting estimator thread 0... [ 86.952552][ T6124] tipc: Started in network mode [ 86.967853][ T6124] tipc: Node identity ac1414aa, cluster identity 4711 [ 86.996973][ T5856] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.009332][ T6124] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 87.036257][ T6124] tipc: Enabled bearer , priority 10 [ 87.042876][ T6125] IPVS: using max 16 ests per chain, 38400 per kthread [ 87.503162][ T6123] loop0: detected capacity change from 0 to 1024 [ 87.941558][ T6123] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 88.047586][ T6123] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 88.151247][ T25] tipc: Node number set to 2886997162 [ 88.484019][ T6123] JBD2: no valid journal superblock found [ 88.488305][ T6150] loop4: detected capacity change from 0 to 1024 [ 88.489802][ T6123] EXT4-fs (loop0): Could not load journal inode [ 88.513408][ T6150] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.535512][ T6150] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 88.546150][ T29] audit: type=1326 audit(1732096638.948:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6145 comm="syz.1.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcd37e759 code=0x7ffc0000 [ 88.613865][ T6150] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.629788][ T29] audit: type=1326 audit(1732096638.958:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6145 comm="syz.1.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcd37e759 code=0x7ffc0000 [ 88.652144][ T29] audit: type=1326 audit(1732096638.978:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6145 comm="syz.1.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcfcd37d0f0 code=0x7ffc0000 [ 88.674612][ T29] audit: type=1326 audit(1732096638.978:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6145 comm="syz.1.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fcfcd37ff87 code=0x7ffc0000 [ 88.696953][ T29] audit: type=1326 audit(1732096638.978:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6145 comm="syz.1.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcfcd37e759 code=0x7ffc0000 [ 88.719919][ T29] audit: type=1326 audit(1732096638.978:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6145 comm="syz.1.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fcfcd37ff87 code=0x7ffc0000 [ 88.742808][ T29] audit: type=1326 audit(1732096638.978:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6145 comm="syz.1.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fcfcd37d3ea code=0x7ffc0000 [ 88.766250][ T29] audit: type=1326 audit(1732096638.978:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6145 comm="syz.1.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcd37e759 code=0x7ffc0000 [ 88.788521][ T29] audit: type=1326 audit(1732096638.978:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6145 comm="syz.1.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcd37e759 code=0x7ffc0000 [ 88.877368][ T6150] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 89.318951][ T5850] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.762977][ T6176] IPv6: NLM_F_CREATE should be specified when creating new route [ 89.817061][ T6182] rdma_op ffff8880310031f0 conn xmit_rdma 0000000000000000 [ 89.840895][ T6181] syz.1.90 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 90.120484][ T6190] loop1: detected capacity change from 0 to 1024 [ 90.276953][ T6190] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.313446][ T6190] EXT4-fs error (device loop1): ext4_xattr_inode_iget:440: inode #11: comm syz.1.97: missing EA_INODE flag [ 90.383077][ T6190] EXT4-fs (loop1): Remounting filesystem read-only [ 90.555453][ T5840] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.740753][ C1] net_ratelimit: 15 callbacks suppressed [ 90.740779][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 90.799313][ T5902] IPVS: starting estimator thread 0... [ 90.832665][ T6218] vlan2: entered promiscuous mode [ 90.858310][ T6218] vlan2: entered allmulticast mode [ 90.878534][ T6218] hsr_slave_1: entered allmulticast mode [ 90.906293][ T6219] tipc: Started in network mode [ 90.913403][ T6227] loop2: detected capacity change from 0 to 128 [ 90.922048][ T6220] IPVS: using max 16 ests per chain, 38400 per kthread [ 90.929098][ T6219] tipc: Node identity ac1414aa, cluster identity 4711 [ 90.951180][ T6219] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 90.985551][ T6219] tipc: Enabled bearer , priority 10 [ 90.995133][ T6227] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 91.002571][ T6218] loop4: detected capacity change from 0 to 2048 [ 91.055634][ T6227] ext4 filesystem being mounted at /24/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 91.090833][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 91.140926][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 91.170184][ T6218] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.194144][ T6218] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.230845][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 91.264624][ T6218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.108'. [ 91.336580][ T5844] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 91.370727][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 91.510760][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 91.535129][ T6249] loop3: detected capacity change from 0 to 512 [ 91.637839][ T6249] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 91.650810][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 91.686466][ T6249] EXT4-fs (loop3): invalid journal inode [ 91.700136][ T6249] EXT4-fs (loop3): can't get journal size [ 91.715003][ T6252] loop2: detected capacity change from 0 to 2048 [ 91.717435][ T6218] hsr_slave_1 (unregistering): left allmulticast mode [ 91.728842][ T6249] EXT4-fs (loop3): 1 truncate cleaned up [ 91.736820][ T6249] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.780739][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 91.790740][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 91.829972][ T6218] hsr_slave_1 (unregistering): left promiscuous mode [ 91.859956][ T6252] Alternate GPT is invalid, using primary GPT. [ 91.894165][ T5851] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.922082][ T6252] loop2: p2 p3 p7 [ 91.949104][ T6254] netlink: 28 bytes leftover after parsing attributes in process `syz.2.116'. [ 91.966104][ T6254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.116'. [ 92.021396][ T5902] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 92.070906][ T5901] tipc: Node number set to 2886997162 [ 92.160994][ T5902] usb 2-1: device descriptor read/64, error -71 [ 92.166969][ T6258] loop3: detected capacity change from 0 to 512 [ 92.232895][ T6258] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.262342][ T6258] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.400830][ T5902] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 92.488918][ T5851] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.518557][ T6266] loop5: detected capacity change from 0 to 4096 [ 92.534807][ T5850] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.547357][ T5902] usb 2-1: device descriptor read/64, error -71 [ 92.580214][ T6268] netlink: 28 bytes leftover after parsing attributes in process `syz.2.129'. [ 92.631609][ T6266] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.662027][ T5902] usb usb2-port1: attempt power cycle [ 92.902561][ T6281] loop4: detected capacity change from 0 to 736 [ 92.918032][ T6281] ======================================================= [ 92.918032][ T6281] WARNING: The mand mount option has been deprecated and [ 92.918032][ T6281] and is ignored by this kernel. Remove the mand [ 92.918032][ T6281] option from the mount to silence this warning. [ 92.918032][ T6281] ======================================================= [ 92.969704][ T5856] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.001019][ T5902] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 93.038025][ T5902] usb 2-1: device descriptor read/8, error -71 [ 93.242905][ T6281] ISOFS: unable to read i-node block [ 93.256755][ T6286] loop5: detected capacity change from 0 to 2048 [ 93.290887][ T5902] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 93.328480][ T6286] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.343481][ T5902] usb 2-1: device descriptor read/8, error -71 [ 93.453140][ T5902] usb usb2-port1: unable to enumerate USB device [ 93.455573][ T6295] loop3: detected capacity change from 0 to 128 [ 93.474224][ T6295] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 93.517620][ T6295] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 93.582119][ T5856] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.744393][ T5851] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 94.274133][ T6317] syz.5.148[6317] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.274229][ T6317] syz.5.148[6317] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.299429][ T6317] syz.5.148[6317] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.205596][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 95.205621][ T29] audit: type=1326 audit(1732096645.678:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6334 comm="syz.1.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcd37e759 code=0x7ffc0000 [ 95.259256][ T29] audit: type=1326 audit(1732096645.678:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6334 comm="syz.1.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcd37e759 code=0x7ffc0000 [ 95.288817][ T29] audit: type=1326 audit(1732096645.718:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6334 comm="syz.1.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcfcd37e759 code=0x7ffc0000 [ 95.321354][ T29] audit: type=1326 audit(1732096645.718:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6334 comm="syz.1.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcd37e759 code=0x7ffc0000 [ 95.398050][ T29] audit: type=1326 audit(1732096645.718:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6334 comm="syz.1.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcd37e759 code=0x7ffc0000 [ 95.429744][ T6340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.160'. [ 95.535377][ T29] audit: type=1326 audit(1732096645.718:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6334 comm="syz.1.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcfcd37e759 code=0x7ffc0000 [ 95.657057][ T29] audit: type=1326 audit(1732096645.718:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6334 comm="syz.1.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcd37e759 code=0x7ffc0000 [ 95.695883][ T29] audit: type=1326 audit(1732096645.718:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6334 comm="syz.1.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcfcd37e759 code=0x7ffc0000 [ 95.719560][ T29] audit: type=1326 audit(1732096645.718:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6334 comm="syz.1.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcd37e759 code=0x7ffc0000 [ 95.743467][ T29] audit: type=1326 audit(1732096645.728:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6334 comm="syz.1.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7fcfcd37e759 code=0x7ffc0000 [ 95.940743][ C1] net_ratelimit: 13 callbacks suppressed [ 95.940766][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 96.102020][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 96.319109][ T6309] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 96.340791][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 96.343430][ T6327] netlink: 'syz.5.154': attribute type 10 has an invalid length. [ 96.468112][ T6327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.479397][ T6327] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 96.500768][ T6346] netlink: 44 bytes leftover after parsing attributes in process `syz.1.162'. [ 96.695836][ T6356] loop1: detected capacity change from 0 to 1024 [ 96.737495][ T6356] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 96.779853][ T6356] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 96.912849][ T6356] JBD2: no valid journal superblock found [ 96.935203][ T6356] EXT4-fs (loop1): Could not load journal inode [ 96.980792][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 97.140825][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 97.217872][ T6376] loop1: detected capacity change from 0 to 164 [ 97.380770][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 97.426795][ T6386] loop3: detected capacity change from 0 to 1024 [ 97.481807][ T6385] netlink: 'syz.4.179': attribute type 10 has an invalid length. [ 97.534401][ T6376] Unsupported NM flag settings (8) [ 97.650139][ T6385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.732967][ T6386] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.768469][ T6385] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 97.906365][ T6386] EXT4-fs error (device loop3): ext4_xattr_inode_iget:440: inode #11: comm syz.3.178: missing EA_INODE flag [ 97.982949][ T6386] EXT4-fs (loop3): Remounting filesystem read-only [ 98.020742][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 98.180727][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 98.257860][ T5851] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.420731][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 98.442791][ T6415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.193'. [ 98.492485][ T6417] loop3: detected capacity change from 0 to 1024 [ 98.515021][ T6417] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 98.526218][ T6417] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 98.541946][ T6417] JBD2: no valid journal superblock found [ 98.547774][ T6417] EXT4-fs (loop3): Could not load journal inode [ 98.639593][ T6419] Zero length message leads to an empty skb [ 98.689897][ T6423] loop0: detected capacity change from 0 to 512 [ 98.711063][ T6425] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 99.230333][ T6434] netlink: 708 bytes leftover after parsing attributes in process `syz.4.197'. [ 99.970243][ T6439] netlink: 44 bytes leftover after parsing attributes in process `syz.1.203'. [ 99.993871][ T6438] netlink: 'syz.5.201': attribute type 10 has an invalid length. [ 100.410555][ T6449] loop5: detected capacity change from 0 to 1024 [ 100.418129][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 100.418148][ T29] audit: type=1326 audit(1732096650.898:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6444 comm="syz.1.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcd37e759 code=0x7ffc0000 [ 100.423333][ T6453] loop2: detected capacity change from 0 to 2048 [ 100.424390][ T29] audit: type=1326 audit(1732096650.898:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6444 comm="syz.1.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcd37e759 code=0x7ffc0000 [ 100.521484][ T6449] EXT4-fs: Ignoring removed nobh option [ 100.548166][ T6449] EXT4-fs: Ignoring removed orlov option [ 100.584054][ T6453] Alternate GPT is invalid, using primary GPT. [ 100.592061][ T6453] loop2: p2 p3 p7 [ 100.629200][ T29] audit: type=1326 audit(1732096650.948:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6444 comm="syz.1.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcfcd37e759 code=0x7ffc0000 [ 100.629968][ T6453] netlink: 28 bytes leftover after parsing attributes in process `syz.2.204'. [ 100.671018][ T29] audit: type=1326 audit(1732096650.958:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6444 comm="syz.1.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcd37e759 code=0x7ffc0000 [ 100.711779][ T6449] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.726882][ T29] audit: type=1326 audit(1732096650.958:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6444 comm="syz.1.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcfcd37e759 code=0x7ffc0000 [ 100.750842][ T29] audit: type=1326 audit(1732096650.958:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6444 comm="syz.1.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcd37e759 code=0x7ffc0000 [ 100.750889][ T29] audit: type=1326 audit(1732096650.958:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6444 comm="syz.1.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcfcd37e759 code=0x7ffc0000 [ 100.751184][ T29] audit: type=1326 audit(1732096650.958:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6444 comm="syz.1.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcd37e759 code=0x7ffc0000 [ 100.751229][ T29] audit: type=1326 audit(1732096650.958:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6444 comm="syz.1.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=143 compat=0 ip=0x7fcfcd37e759 code=0x7ffc0000 [ 100.751271][ T29] audit: type=1326 audit(1732096650.958:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6444 comm="syz.1.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcd37e759 code=0x7ffc0000 [ 100.756492][ T5210] Alternate GPT is invalid, using primary GPT. [ 100.756654][ T5210] loop2: p2 p3 p7 [ 100.919327][ T6466] loop1: detected capacity change from 0 to 512 [ 100.958017][ T6449] [ 100.958028][ T6449] ============================= [ 100.958037][ T6449] [ BUG: Invalid wait context ] [ 100.958048][ T6449] 6.12.0-syzkaller-01518-ga5c93bfec0be #0 Not tainted [ 100.958063][ T6449] ----------------------------- [ 100.958072][ T6449] syz.5.208/6449 is trying to lock: [ 100.958085][ T6449] ffff88805c6afa00 (&trie->lock){..-.}-{3:3}, at: trie_delete_elem+0x96/0x6a0 [ 100.958153][ T6449] other info that might help us debug this: [ 100.958162][ T6449] context-{5:5} [ 100.958174][ T6449] 2 locks held by syz.5.208/6449: [ 100.958190][ T6449] #0: ffff8880b873ea98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 100.958268][ T6449] #1: ffffffff8e93a5a0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x244/0x590 [ 100.958342][ T6449] stack backtrace: [ 100.958351][ T6449] CPU: 1 UID: 0 PID: 6449 Comm: syz.5.208 Not tainted 6.12.0-syzkaller-01518-ga5c93bfec0be #0 [ 100.958380][ T6449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 100.958395][ T6449] Call Trace: [ 100.958405][ T6449] [ 100.958415][ T6449] dump_stack_lvl+0x241/0x360 [ 100.958444][ T6449] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.958470][ T6449] ? __pfx__printk+0x10/0x10 [ 100.958508][ T6449] ? validate_chain+0x11e/0x5920 [ 100.958544][ T6449] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.958578][ T6449] __lock_acquire+0x15a8/0x2100 [ 100.958613][ T6449] lock_acquire+0x1ed/0x550 [ 100.958637][ T6449] ? trie_delete_elem+0x96/0x6a0 [ 100.958666][ T6449] ? __pfx_lock_acquire+0x10/0x10 [ 100.958690][ T6449] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.958721][ T6449] ? __lock_acquire+0x1397/0x2100 [ 100.958757][ T6449] _raw_spin_lock_irqsave+0xd5/0x120 [ 100.958794][ T6449] ? trie_delete_elem+0x96/0x6a0 [ 100.958819][ T6449] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 100.958859][ T6449] ? __pfx_lock_acquire+0x10/0x10 [ 100.958884][ T6449] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.958917][ T6449] trie_delete_elem+0x96/0x6a0 [ 100.958945][ T6449] ? __pfx___cant_migrate+0x10/0x10 [ 100.958988][ T6449] ? bpf_trace_run4+0x244/0x590 [ 100.959020][ T6449] bpf_prog_1c0c44170264bb34+0x46/0x4e [ 100.959043][ T6449] bpf_trace_run4+0x336/0x590 [ 100.959077][ T6449] ? psi_group_change+0xb4e/0x1190 [ 100.959112][ T6449] ? __pfx_bpf_trace_run4+0x10/0x10 [ 100.959149][ T6449] ? __pfx_probe_sched_switch+0x10/0x10 [ 100.959183][ T6449] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.959213][ T6449] ? tracing_record_taskinfo_sched_switch+0x7b/0x390 [ 100.959246][ T6449] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 100.959276][ T6449] __traceiter_sched_switch+0x9a/0xd0 [ 100.959310][ T6449] __schedule+0x22bc/0x4c30 [ 100.959363][ T6449] ? __pfx___schedule+0x10/0x10 [ 100.959403][ T6449] ? __pfx_lock_release+0x10/0x10 [ 100.959433][ T6449] ? futex_wait_queue+0x27/0x1d0 [ 100.959472][ T6449] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.959504][ T6449] ? schedule+0x90/0x320 [ 100.959541][ T6449] schedule+0x14b/0x320 [ 100.959578][ T6449] ? futex_wait_queue+0x27/0x1d0 [ 100.959617][ T6449] futex_wait_queue+0x14e/0x1d0 [ 100.959658][ T6449] __futex_wait+0x17f/0x320 [ 100.959700][ T6449] ? __pfx___futex_wait+0x10/0x10 [ 100.959742][ T6449] ? __pfx_futex_wake_mark+0x10/0x10 [ 100.959783][ T6449] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.959813][ T6449] ? do_raw_spin_unlock+0x13c/0x8b0 [ 100.959852][ T6449] ? wake_up_q+0xdc/0x120 [ 100.959887][ T6449] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.959917][ T6449] futex_wait+0x101/0x360 [ 100.959956][ T6449] ? __pfx_futex_wait+0x10/0x10 [ 100.959994][ T6449] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.960020][ T6449] do_futex+0x33b/0x560 [ 100.960045][ T6449] ? bpf_raw_tracepoint_open+0x18b/0x1f0 [ 100.960079][ T6449] ? __pfx_do_futex+0x10/0x10 [ 100.960105][ T6449] ? __pfx___sys_bpf+0x10/0x10 [ 100.960131][ T6449] ? arch_do_signal_or_restart+0x51f/0x860 [ 100.960165][ T6449] __se_sys_futex+0x3f9/0x480 [ 100.960195][ T6449] ? __pfx___se_sys_futex+0x10/0x10 [ 100.960222][ T6449] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 100.960257][ T6449] ? do_syscall_64+0x100/0x230 [ 100.960279][ T6449] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.960304][ T6449] ? __x64_sys_futex+0x21/0xf0 [ 100.960332][ T6449] do_syscall_64+0xf3/0x230 [ 100.960355][ T6449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.960389][ T6449] RIP: 0033:0x7f6c1037e759 [ 100.960406][ T6449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.960424][ T6449] RSP: 002b:00007f6c1110d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 100.960447][ T6449] RAX: ffffffffffffffda RBX: 00007f6c10535f88 RCX: 00007f6c1037e759 [ 100.960464][ T6449] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6c10535f88 [ 100.960478][ T6449] RBP: 00007f6c10535f80 R08: 0000000000000000 R09: 0000000000000000 [ 100.960493][ T6449] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6c10535f8c [ 100.960507][ T6449] R13: 0000000000000000 R14: 00007ffed89876a0 R15: 00007ffed8987788 [ 100.960530][ T6449] [ 100.973226][ T5841] udevd[5841]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 100.985898][ T5841] udevd[5841]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 100.997946][ T6102] udevd[6102]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 101.020371][ T6102] udevd[6102]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 101.033063][ T6103] udevd[6103]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 101.038907][ T5862] udevd[5862]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 101.136831][ T6466] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.136913][ T6466] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.155520][ C1] net_ratelimit: 6 callbacks suppressed [ 101.155541][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 101.276065][ T5856] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.300719][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 101.540694][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 101.542782][ T6483] netlink: 708 bytes leftover after parsing attributes in process `syz.3.217'. [ 102.190866][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 102.340706][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 102.361110][ T5840] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.580840][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 103.220724][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 103.380716][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 103.620709][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 104.260728][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 106.340717][ C1] net_ratelimit: 5 callbacks suppressed [ 106.340742][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 106.500705][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 106.740731][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 107.380698][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 107.540870][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 107.780711][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 108.420729][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 108.581556][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 108.820713][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 109.460714][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available