last executing test programs: 8.339901176s ago: executing program 3 (id=67): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x979f}, 0x18) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 8.206139307s ago: executing program 3 (id=69): socket$kcm(0x10, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18) getitimer(0x0, &(0x7f0000000500)) 7.972056755s ago: executing program 3 (id=71): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r0}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain={'key_or_keyring:', r1}) 7.742100544s ago: executing program 3 (id=73): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x1, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r6, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1b00, 0x10022, 0x0) 6.399139023s ago: executing program 1 (id=82): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=ANY=[@ANYRESDEC, @ANYRES8, @ANYRESOCT=0x0, @ANYRES32, @ANYRESOCT, @ANYRES8=0xffffffffffffffff, @ANYBLOB="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", @ANYRES32], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xe, 0x15, &(0x7f0000000240)=ANY=[@ANYRESOCT=r1], &(0x7f00000008c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf26}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000300)=ANY=[@ANYRESDEC=r2, @ANYRESHEX=r3], &(0x7f0000000780)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r5}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="9b5600ffffffff040000e517110000ee215eefd82de94ac8f2f9297381a70f870f76f06e856752b11bcaf65f59b9991983850a7fcddca29ab8a2e833159e59bb4e1dccfe00a648d774422a10d86c3231436f789b578445be442a92638a1668d937428f0e5bf0c2af26e897bedc9993ff5fb13bf8d4e4058e85d8e1", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES64=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf559715d9e0ed76c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0x2000300, 0xa, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf33", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r8 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f00000000c0)={0x1, {{0xa, 0x4e20, 0x5, @mcast2, 0x6}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000000000000a004e2000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000010000000a00000003000000000000000000000000000000000000f4ff000000000000000000000000000000000000001400"/272], 0x110) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r9 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r9) 2.978828869s ago: executing program 0 (id=94): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91104e000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 2.774665626s ago: executing program 0 (id=96): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000006c0)={[{@noquota}, {@noquota}, {@grpjquota}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x2, 0x4f3, &(0x7f0000000700)="$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") bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x7c00, 0x0, 0x3) dup(0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0, 0xe0ff}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000300)='G', 0x1}], 0x1, &(0x7f0000000640)=[{0x10, 0x84, 0x8}, {0x18, 0x84, 0x0, 'b'}], 0x28}, 0x41) 2.489360309s ago: executing program 0 (id=97): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x81}) io_uring_enter(r2, 0x3516, 0x0, 0x2, 0x0, 0x0) 2.331771422s ago: executing program 0 (id=98): add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r1, 0x1, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xffffffff, 0x0, r2, 0x7, '\x00', 0x0, r1, 0x0, 0x3}, 0x50) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 1.715615791s ago: executing program 1 (id=101): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009e0000000b"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x1000000000000bb}, 0x18) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) 1.650413877s ago: executing program 2 (id=102): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000bfc1000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 1.649936497s ago: executing program 3 (id=103): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1c00000000000000", @ANYRES32, @ANYBLOB="43a56565e1e98fb132b9d6e7287df4bf07bd13ebad6bc1ee1205d3f06baaba9e7c2b9faa58be771336c80496eb6aaaefdef519ab9a929332cdd671a01997eb969085aba53b7c4bbfb37897c792db5a3a01831d7a886a2ba5170ceba9f0f8c3e205f389c7456de689293c83836a10c8775499754b3d8a90ae7152a61be3b80f", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500"], 0x50}, 0x1, 0xba01}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 1.439216694s ago: executing program 1 (id=106): syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xff, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/18, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb0000080003"], 0x68}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f00000002c0)={'ipvs\x00'}, &(0x7f0000000340)=0x1e) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r3], 0x54}}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000004c0)=[{0x0}], 0x1) r5 = io_uring_setup(0x4d42, &(0x7f0000000240)={0x0, 0xfc19, 0x40, 0x1, 0x6}) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000002000000000000000000000000000100"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, &(0x7f0000000500), 0x66) mount(&(0x7f0000000200)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='minix\x00', 0x3000090, 0x0) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r8 = socket$netlink(0x10, 0x3, 0x15) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000080)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000", 0x20}], 0x1) r9 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r10 = epoll_create(0x4) ioctl$IMADDTIMER(r9, 0x80044940, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000100)={0x8, 0x2000000}) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3={0x300008c}, 0x18, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000140)={0x5, 0x319}) 1.298097265s ago: executing program 4 (id=107): openat$ptmx(0xffffffffffffff9c, 0x0, 0x800, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r0}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x8000000000004}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r2, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 1.211239372s ago: executing program 2 (id=108): socket$packet(0x11, 0x3, 0x300) r0 = socket$kcm(0xa, 0x3, 0x3a) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r2, 0x0, 0xf7}, 0x18) open_tree(0xffffffffffffff9c, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 1.210988872s ago: executing program 0 (id=109): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0, 0x0, 0xff}, 0x18) r1 = epoll_create1(0x80000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x80800, 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r2, &(0x7f0000001980)=""/179, 0xb3) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000000)) 1.105534641s ago: executing program 4 (id=110): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) r2 = dup3(r0, r1, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r5, 0x0, 0x100000000}, 0x18) write$P9_RGETATTR(r2, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 903.814057ms ago: executing program 2 (id=111): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x48, 0x0, 0x8, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x12a}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0xf}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x8}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0x40040) 776.050027ms ago: executing program 2 (id=112): r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[@cred={{0x1c, 0x1, 0x2, {r0, 0x0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38, 0x4880}}], 0x1, 0x0) 755.747309ms ago: executing program 0 (id=113): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r1) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9004", 0x0, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c951ee12e"}}}}}}}, 0x0) 710.302112ms ago: executing program 4 (id=114): r0 = io_uring_setup(0xf02, &(0x7f00000008c0)={0x0, 0xaa72, 0x1000}) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000000)={0x1, 0x0, 0x1000, 0x28000000, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) 657.400417ms ago: executing program 1 (id=115): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000070a050000000000000000000af93f0109000100"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x4004014) 599.915401ms ago: executing program 2 (id=116): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) preadv(r0, &(0x7f0000004ec0), 0x0, 0x8000, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000a40)={0x0, 0x465d, 0x800, 0x6, 0x14a}, &(0x7f00000006c0)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x507, 0x966, 0x21, &(0x7f0000000000)={[0x10000]}, 0x8) io_uring_enter(r2, 0x40f9, 0x217, 0xa5, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000740)={0xfffffffb, 0x2, 0x1, 'queue0\x00'}) r9 = io_uring_setup(0xf02, &(0x7f00000008c0)={0x0, 0xaa72, 0x1000}) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000000)={0x1, 0x0, 0x1000, 0x28000000, 0x0, 0x0, 0x0, 0x0}) write(r7, &(0x7f0000000200)="74ed9397bb2c29533aa5d1f9854b5436db3a11c2fbaab5d172ef81d14d0b7b959de229339895c8", 0x27) io_uring_register$IORING_REGISTER_FILES(r9, 0x1e, &(0x7f0000000000)=[r9], 0x1) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x27, 0x0, 0x0, 0x42, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r10}, 0x10) rmdir(&(0x7f00000002c0)='./file0\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000400)={0x0, 0x1f000000}) fcntl$setlease(r1, 0x400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x14, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRESDEC=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x18) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) fcntl$setlease(r1, 0x400, 0x2) syz_io_uring_setup(0x4d96, &(0x7f0000000000)={0x0, 0xffb6, 0x400, 0x3, 0x203}, &(0x7f0000000380)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0, 0x80002101}) 502.184829ms ago: executing program 4 (id=117): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) io_cancel(0x0, 0x0, 0x0) 384.952508ms ago: executing program 2 (id=118): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) vmsplice(r0, &(0x7f00000013c0)=[{&(0x7f0000000100)="a7", 0x1}, {&(0x7f0000000240)="9f", 0x1}, {&(0x7f0000000300)='b', 0x1}], 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x5, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r6}, 0x18) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xe0341, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) 296.017606ms ago: executing program 4 (id=119): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) epoll_pwait(r1, 0x0, 0x0, 0x10001, &(0x7f0000000180)={[0xffffffffe277652b]}, 0x8) 295.862906ms ago: executing program 1 (id=120): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="d80000001b00010000000000000000000a010100000000000000000000000000e0000002000000000000000000000000000000002000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000001000000000000000000000000000c0008000800"], 0xd8}}, 0x0) 186.757755ms ago: executing program 1 (id=121): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000380)={0xc, 0x8, 0x144, {0x0}}, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x1}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x7345}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x160) 165.829726ms ago: executing program 4 (id=122): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x0, 0x802e2e, 0x0, 0xfffffffc, 0x0, 0x0, 0x1, 0x401}}) 0s ago: executing program 3 (id=123): io_setup(0x8, 0x0) socket$nl_route(0x10, 0x3, 0x0) creat(0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x15) r1 = dup(0xffffffffffffffff) write$P9_RLERRORu(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}}, 0x0) recvmmsg(r3, &(0x7f00000002c0), 0x220, 0x100, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.236' (ED25519) to the list of known hosts. [ 82.381674][ T4254] cgroup: Unknown subsys name 'net' [ 82.483330][ T4254] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.077635][ T4254] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 85.610288][ T4270] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.619574][ T4270] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.627688][ T4270] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.636038][ T4270] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.643846][ T4270] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.644095][ T4272] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.658797][ T4270] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.667691][ T4273] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.676480][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.694041][ T4273] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.705859][ T4273] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.740419][ T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.757016][ T4272] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.765764][ T4272] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.767147][ T4278] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.773150][ T4272] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.782112][ T4278] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.789509][ T4272] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.796335][ T4278] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.803837][ T4272] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.819578][ T4268] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.827011][ T4278] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.828076][ T4268] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.836725][ T4278] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.842524][ T4268] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 85.849075][ T4278] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.863056][ T4280] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.901022][ T4280] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.912800][ T4280] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.920474][ T4280] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.218176][ T4265] chnl_net:caif_netlink_parms(): no params data found [ 86.427732][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 86.489599][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.511655][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.539359][ T4265] device bridge_slave_0 entered promiscuous mode [ 86.582338][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.589806][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.599061][ T4265] device bridge_slave_1 entered promiscuous mode [ 86.620924][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 86.631167][ T4266] chnl_net:caif_netlink_parms(): no params data found [ 86.649358][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 86.676082][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.683558][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.692530][ T4275] device bridge_slave_0 entered promiscuous mode [ 86.704836][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.712201][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.720479][ T4275] device bridge_slave_1 entered promiscuous mode [ 86.730416][ T4265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.747303][ T4265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.829341][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.865710][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.883443][ T4265] team0: Port device team_slave_0 added [ 86.915324][ T4265] team0: Port device team_slave_1 added [ 86.998908][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.006260][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.020531][ T4266] device bridge_slave_0 entered promiscuous mode [ 87.031618][ T4275] team0: Port device team_slave_0 added [ 87.081807][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.092275][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.104509][ T4266] device bridge_slave_1 entered promiscuous mode [ 87.115760][ T4275] team0: Port device team_slave_1 added [ 87.125626][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.135636][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.149691][ T4274] device bridge_slave_0 entered promiscuous mode [ 87.159008][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.167476][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.175917][ T4276] device bridge_slave_0 entered promiscuous mode [ 87.185673][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.193718][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.221407][ T4265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.235070][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.250067][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.285672][ T4265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.329292][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.337494][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.346028][ T4274] device bridge_slave_1 entered promiscuous mode [ 87.353502][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.360987][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.374624][ T4276] device bridge_slave_1 entered promiscuous mode [ 87.457188][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.470727][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.480866][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.488022][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.514655][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.564815][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.572399][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.598979][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.613189][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.626546][ T4265] device hsr_slave_0 entered promiscuous mode [ 87.634791][ T4265] device hsr_slave_1 entered promiscuous mode [ 87.643647][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.656057][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.679989][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.708106][ T4266] team0: Port device team_slave_0 added [ 87.726923][ T4276] team0: Port device team_slave_0 added [ 87.751290][ T4266] team0: Port device team_slave_1 added [ 87.761063][ T4276] team0: Port device team_slave_1 added [ 87.767676][ T4280] Bluetooth: hci0: command 0x0409 tx timeout [ 87.777959][ T4274] team0: Port device team_slave_0 added [ 87.826040][ T4274] team0: Port device team_slave_1 added [ 87.855024][ T4275] device hsr_slave_0 entered promiscuous mode [ 87.862874][ T4275] device hsr_slave_1 entered promiscuous mode [ 87.870306][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.878722][ T4275] Cannot create hsr debugfs directory [ 87.898368][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.905719][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.926934][ T4280] Bluetooth: hci4: command 0x0409 tx timeout [ 87.932731][ T4270] Bluetooth: hci3: command 0x0409 tx timeout [ 87.939207][ T48] Bluetooth: hci1: command 0x0409 tx timeout [ 87.946066][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.963430][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.971784][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.999522][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.010579][ T4270] Bluetooth: hci2: command 0x0409 tx timeout [ 88.049941][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.058321][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.085712][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.098111][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.105202][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.132910][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.145896][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.153307][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.180422][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.208497][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.216125][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.242482][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.325307][ T4276] device hsr_slave_0 entered promiscuous mode [ 88.332362][ T4276] device hsr_slave_1 entered promiscuous mode [ 88.339736][ T4276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.347633][ T4276] Cannot create hsr debugfs directory [ 88.427559][ T4266] device hsr_slave_0 entered promiscuous mode [ 88.434548][ T4266] device hsr_slave_1 entered promiscuous mode [ 88.441840][ T4266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.451095][ T4266] Cannot create hsr debugfs directory [ 88.479701][ T4274] device hsr_slave_0 entered promiscuous mode [ 88.486822][ T4274] device hsr_slave_1 entered promiscuous mode [ 88.498498][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.506526][ T4274] Cannot create hsr debugfs directory [ 88.747976][ T4265] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.782566][ T4265] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.792713][ T4265] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.823460][ T4265] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.871508][ T4275] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.889378][ T4275] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.923873][ T4275] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.935181][ T4275] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.989324][ T4276] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.020261][ T4276] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.044755][ T4276] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.060044][ T4276] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.094136][ T4274] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.125609][ T4265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.134362][ T4274] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.179821][ T4274] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.195079][ T4274] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.243018][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.257144][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.269051][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.283130][ T4265] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.344245][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.352656][ T4266] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.374787][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.383286][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.393590][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.403051][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.413360][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.420824][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.430971][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.441114][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.450241][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.457613][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.466164][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.483858][ T4266] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.503965][ T4266] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.533912][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.543127][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.557437][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.564561][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.572961][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.581870][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.591152][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.599993][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.607437][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.616160][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.625710][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.654700][ T4266] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.673519][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.689622][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.704731][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.714912][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.724872][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.734198][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.743661][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.771923][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.783797][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.793339][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.803948][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.814115][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.828784][ T4265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.844438][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.852527][ T4270] Bluetooth: hci0: command 0x041b tx timeout [ 89.881659][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.890558][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.900235][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.915564][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.925440][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.951626][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.960151][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.003893][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.012226][ T4270] Bluetooth: hci3: command 0x041b tx timeout [ 90.017100][ T4280] Bluetooth: hci1: command 0x041b tx timeout [ 90.024672][ T4280] Bluetooth: hci4: command 0x041b tx timeout [ 90.034808][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.045095][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.062451][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.076335][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.086487][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.097775][ T4280] Bluetooth: hci2: command 0x041b tx timeout [ 90.122203][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.161624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.177388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.225474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.238680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.267136][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.274571][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.297716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.317520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.326198][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.333500][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.355527][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.369846][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.382664][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.405615][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.417960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.442366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.454419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.468923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.493618][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.508478][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.535610][ T4276] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 90.553759][ T4276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.581217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.589217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.597320][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.606555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.615706][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.622909][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.631366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.640523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.651059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.661297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.670596][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.677993][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.686071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.695186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.703862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.713714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.722229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.736037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.744955][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.781818][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.795312][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.806257][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.822274][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.832789][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.844155][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.853321][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.862402][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.872448][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.884974][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.910653][ T4274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.931154][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.947274][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.958295][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.977811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.995363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.005421][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.012825][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.021161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 91.031302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.040033][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.047478][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.064301][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.099943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 91.117537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.125126][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.142375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 91.154388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 91.169488][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 91.183196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 91.194754][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.209325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.220103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 91.239264][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 91.255794][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 91.305301][ T4266] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 91.332717][ T4266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.356544][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 91.366249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.383980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 91.394235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.412483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 91.444788][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.458521][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.503144][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.522188][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.550911][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.573229][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.589423][ T4265] device veth0_vlan entered promiscuous mode [ 91.622494][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.637216][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.644874][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.673625][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.687927][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.706047][ T4265] device veth1_vlan entered promiscuous mode [ 91.735452][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.746581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.755825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.772650][ T4275] device veth0_vlan entered promiscuous mode [ 91.808932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.820069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.849789][ T4265] device veth0_macvtap entered promiscuous mode [ 91.863164][ T4265] device veth1_macvtap entered promiscuous mode [ 91.921311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.930547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.940229][ T4280] Bluetooth: hci0: command 0x040f tx timeout [ 91.948986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 91.958540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 91.967831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 91.976330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.988442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.999164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.008852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 92.017752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 92.026911][ T4275] device veth1_vlan entered promiscuous mode [ 92.051076][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.061536][ T4274] device veth0_vlan entered promiscuous mode [ 92.079465][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 92.088172][ T4280] Bluetooth: hci4: command 0x040f tx timeout [ 92.089775][ T127] cfg80211: failed to load regulatory.db [ 92.094563][ T4280] Bluetooth: hci1: command 0x040f tx timeout [ 92.108497][ T4270] Bluetooth: hci3: command 0x040f tx timeout [ 92.130973][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.147820][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.160829][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.184725][ T4280] Bluetooth: hci2: command 0x040f tx timeout [ 92.202987][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.222536][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 92.232849][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.242508][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.252167][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 92.260581][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 92.271161][ T4265] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.280855][ T4265] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.290258][ T4265] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.300440][ T4265] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.314724][ T4274] device veth1_vlan entered promiscuous mode [ 92.400152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 92.418041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 92.434734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 92.444222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 92.480781][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.491109][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.514786][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.524313][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.538621][ T4274] device veth0_macvtap entered promiscuous mode [ 92.550424][ T4275] device veth0_macvtap entered promiscuous mode [ 92.572333][ T4275] device veth1_macvtap entered promiscuous mode [ 92.586528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.595512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.607865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.621326][ T4274] device veth1_macvtap entered promiscuous mode [ 92.659810][ T4266] device veth0_vlan entered promiscuous mode [ 92.667051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 92.675759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 92.686179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 92.697289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 92.722536][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 92.733237][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 92.745335][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.760089][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.772409][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.787174][ T4266] device veth1_vlan entered promiscuous mode [ 92.830866][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 92.839665][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.849029][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.862643][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.873530][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.885711][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.896580][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.908200][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.918918][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.929920][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.942726][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.964572][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.975406][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.985045][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.995432][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.009515][ T4275] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.019524][ T4275] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.028631][ T4275] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.037661][ T4275] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.057224][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.070620][ T4298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.073718][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.080507][ T4298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.095669][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.109224][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.120874][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.142311][ T4276] device veth0_vlan entered promiscuous mode [ 93.178511][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 93.188073][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.196550][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.207458][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.217918][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 93.227468][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 93.244730][ T4274] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.254748][ T4274] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.263959][ T4274] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.274545][ T4274] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.293245][ T4298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.308911][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 93.317694][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 93.323343][ T4298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.331789][ T4276] device veth1_vlan entered promiscuous mode [ 93.360300][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 93.372016][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.382279][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 93.391535][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 93.429280][ T4266] device veth0_macvtap entered promiscuous mode [ 93.502888][ T4266] device veth1_macvtap entered promiscuous mode [ 93.525005][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 93.540234][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 93.549355][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 93.560264][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 93.569998][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 93.611064][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.627324][ T4276] device veth0_macvtap entered promiscuous mode [ 93.634142][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.657533][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.675529][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.686101][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.691418][ T4380] loop0: detected capacity change from 0 to 2048 [ 93.708438][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.731860][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.755871][ T4380] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 93.756743][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.783102][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.815183][ T4276] device veth1_macvtap entered promiscuous mode [ 93.827242][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.840031][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 93.851161][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.871956][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.898268][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.912790][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.924952][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.938992][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.950255][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.962898][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.981471][ T4384] netlink: 'syz.0.1': attribute type 27 has an invalid length. [ 94.007154][ T4280] Bluetooth: hci0: command 0x0419 tx timeout [ 94.166847][ T4280] Bluetooth: hci1: command 0x0419 tx timeout [ 94.176997][ T4280] Bluetooth: hci3: command 0x0419 tx timeout [ 94.183947][ T48] Bluetooth: hci4: command 0x0419 tx timeout [ 94.247435][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 94.353723][ T4384] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.362371][ T4384] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.863372][ T4384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.899737][ T4384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.386596][ T4384] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.395985][ T4384] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.405151][ T4384] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.414430][ T4384] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.557200][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.561760][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 95.566396][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.578863][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 95.592205][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 95.624437][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 95.633303][ T4386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.642496][ T4386] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.653558][ T4386] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 95.673861][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.685841][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.696586][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.713266][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.723747][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.741239][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.754389][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.765628][ T4266] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.766317][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 95.781315][ T4266] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.790660][ T4266] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.799828][ T4266] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.821538][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 95.831731][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 95.865864][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.885974][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.896520][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.907666][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.917953][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.930614][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.942614][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.965238][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 95.980008][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 96.008750][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.008807][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.011711][ T4276] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.011774][ T4276] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.011799][ T4276] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.011823][ T4276] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.052636][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 96.188210][ T4353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.196326][ T4353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.277635][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 96.346862][ T4353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.355095][ T4353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.440980][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.472684][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.492680][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 96.546559][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.562581][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 96.581321][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.620271][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.634275][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.644776][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 96.927749][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 97.439642][ T4409] device syzkaller0 entered promiscuous mode [ 97.811365][ T4412] loop0: detected capacity change from 0 to 1024 [ 97.967217][ T4421] loop1: detected capacity change from 0 to 512 [ 97.980072][ T4421] EXT4-fs: Ignoring removed orlov option [ 97.997540][ T4421] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 98.011661][ T4421] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 98.606206][ T4412] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 98.666966][ T4421] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 98.689007][ T4421] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2818: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 98.709900][ T4421] EXT4-fs (loop1): 1 orphan inode deleted [ 98.715889][ T4421] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 98.772724][ T4412] EXT4-fs: Ignoring sb option on remount [ 98.813069][ T4412] EXT4-fs: Ignoring removed orlov option [ 98.819799][ T4412] EXT4-fs: Ignoring removed nomblk_io_submit option [ 98.866849][ T4412] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 99.023305][ T4412] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 99.037890][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 101.076138][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 101.587169][ T4479] loop0: detected capacity change from 0 to 1024 [ 101.630249][ T4479] EXT4-fs: Ignoring removed orlov option [ 101.747841][ T4479] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 101.922648][ T27] audit: type=1800 audit(1756331490.300:2): pid=4479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.27" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 101.992736][ T27] audit: type=1804 audit(1756331490.340:3): pid=4494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.27" name="/newroot/5/bus/bus" dev="loop0" ino=18 res=1 errno=0 [ 102.351732][ T4499] loop2: detected capacity change from 0 to 512 [ 102.418728][ T4499] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 102.428081][ T4499] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.688378][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 102.784265][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 102.942431][ T27] audit: type=1326 audit(1756331491.320:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4507 comm="syz.0.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf4c18ebe9 code=0x7ffc0000 [ 103.006947][ T27] audit: type=1326 audit(1756331491.350:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4507 comm="syz.0.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf4c18ebe9 code=0x7ffc0000 [ 103.050728][ T4508] loop0: detected capacity change from 0 to 512 [ 103.092168][ T27] audit: type=1326 audit(1756331491.350:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4507 comm="syz.0.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf4c18ebe9 code=0x7ffc0000 [ 103.147841][ T27] audit: type=1326 audit(1756331491.350:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4507 comm="syz.0.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf4c18ebe9 code=0x7ffc0000 [ 103.171050][ T27] audit: type=1326 audit(1756331491.350:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4507 comm="syz.0.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf4c18ebe9 code=0x7ffc0000 [ 103.195064][ T27] audit: type=1326 audit(1756331491.350:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4507 comm="syz.0.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf4c18ebe9 code=0x7ffc0000 [ 103.219463][ T27] audit: type=1326 audit(1756331491.360:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4507 comm="syz.0.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf4c18ebe9 code=0x7ffc0000 [ 103.223983][ T4508] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 103.363402][ T4508] EXT4-fs error (device loop0): ext4_acquire_dquot:6814: comm syz.0.37: Failed to acquire dquot type 1 [ 103.474196][ T4508] EXT4-fs (loop0): 1 truncate cleaned up [ 103.506742][ T4508] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 103.515962][ T4508] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.645094][ T4522] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 103.654804][ T4523] loop4: detected capacity change from 0 to 512 [ 103.686964][ T4523] EXT4-fs: Ignoring removed orlov option [ 103.736913][ T4523] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.40: Attempting to read directory block (0) that is past i_size (256) [ 103.783223][ T4523] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 103.883992][ T4523] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 103.927791][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 103.943052][ T4526] loop1: detected capacity change from 0 to 164 [ 104.736585][ T4545] loop0: detected capacity change from 0 to 512 [ 104.850473][ T4545] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 104.908789][ T4545] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.057050][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 105.319919][ T4557] netlink: 168 bytes leftover after parsing attributes in process `syz.1.55'. [ 105.482098][ T4559] lo speed is unknown, defaulting to 1000 [ 105.535142][ T4559] lo speed is unknown, defaulting to 1000 [ 105.594060][ T4559] lo speed is unknown, defaulting to 1000 [ 105.663046][ T4559] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 105.775916][ T4559] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 105.989311][ T4559] lo speed is unknown, defaulting to 1000 [ 106.071892][ T4559] lo speed is unknown, defaulting to 1000 [ 106.088165][ T4559] lo speed is unknown, defaulting to 1000 [ 106.130222][ T4559] lo speed is unknown, defaulting to 1000 [ 106.207694][ T4559] lo speed is unknown, defaulting to 1000 [ 106.214698][ T4571] 9pnet_fd: Insufficient options for proto=fd [ 106.417287][ T4575] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 106.482567][ T4575] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 106.547541][ T4575] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 106.971073][ T4587] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 107.325794][ T27] kauditd_printk_skb: 80 callbacks suppressed [ 107.325810][ T27] audit: type=1326 audit(1756331495.700:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4591 comm="syz.2.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6e18ebe9 code=0x7ffc0000 [ 107.453442][ T27] audit: type=1326 audit(1756331495.740:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4591 comm="syz.2.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6e18ebe9 code=0x7ffc0000 [ 107.545804][ T27] audit: type=1326 audit(1756331495.740:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4591 comm="syz.2.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e6e18ebe9 code=0x7ffc0000 [ 107.591252][ T27] audit: type=1326 audit(1756331495.740:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4591 comm="syz.2.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6e18ebe9 code=0x7ffc0000 [ 107.694685][ T27] audit: type=1326 audit(1756331495.740:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4591 comm="syz.2.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6e18ebe9 code=0x7ffc0000 [ 107.725096][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 107.761540][ T4604] loop1: detected capacity change from 0 to 512 [ 107.806713][ T27] audit: type=1326 audit(1756331495.740:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4591 comm="syz.2.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f9e6e18ebe9 code=0x7ffc0000 [ 107.832990][ T4599] device syzkaller0 entered promiscuous mode [ 107.867616][ T4604] ======================================================= [ 107.867616][ T4604] WARNING: The mand mount option has been deprecated and [ 107.867616][ T4604] and is ignored by this kernel. Remove the mand [ 107.867616][ T4604] option from the mount to silence this warning. [ 107.867616][ T4604] ======================================================= [ 107.916743][ T27] audit: type=1326 audit(1756331495.740:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4591 comm="syz.2.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6e18ebe9 code=0x7ffc0000 [ 107.926415][ T4607] loop2: detected capacity change from 0 to 1024 [ 107.990190][ T4609] netlink: 88 bytes leftover after parsing attributes in process `syz.0.77'. [ 108.011172][ T4604] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 108.016844][ T4609] openvswitch: netlink: Flow key attr not present in new flow. [ 108.030012][ T4607] EXT4-fs: Ignoring removed orlov option [ 108.071000][ T4604] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 108.076973][ T4607] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 108.087149][ T4427] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set [ 108.161054][ T4604] EXT4-fs error (device loop1): __ext4_get_inode_loc:4507: comm syz.1.76: Invalid inode table block 1 in block_group 0 [ 108.204726][ T4604] EXT4-fs (loop1): get root inode failed [ 108.246903][ T4604] EXT4-fs (loop1): mount failed [ 108.287942][ T27] audit: type=1800 audit(1756331496.670:97): pid=4607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.78" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 108.409655][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 108.782018][ T4619] loop2: detected capacity change from 0 to 2048 [ 108.840515][ T4619] GPT:first_usable_lbas don't match. [ 108.846423][ T4619] GPT:34 != 290 [ 108.869097][ T4619] GPT: Use GNU Parted to correct GPT errors. [ 108.896214][ T4619] loop2: p1 p2 p3 [ 108.958168][ T27] audit: type=1326 audit(1756331497.340:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4620 comm="syz.1.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff15218ebe9 code=0x7ffc0000 [ 109.032373][ T27] audit: type=1326 audit(1756331497.360:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4620 comm="syz.1.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff15218ebe9 code=0x7ffc0000 [ 109.124483][ T4624] loop0: detected capacity change from 0 to 4096 [ 109.186368][ T4624] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 109.625695][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 109.902478][ T4631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.84'. [ 109.918632][ T4631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.84'. [ 110.194372][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 110.479223][ T4638] loop4: detected capacity change from 0 to 512 [ 110.566360][ T4638] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 110.576282][ T4638] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.004380][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 111.135899][ T4647] loop0: detected capacity change from 0 to 512 [ 111.148055][ T4647] EXT4-fs: Ignoring removed orlov option [ 111.179700][ T4647] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 111.389002][ T4647] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 111.406958][ T4647] EXT4-fs (loop0): 1 orphan inode deleted [ 111.412908][ T4647] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 111.961817][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 112.129021][ T4655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.92'. [ 112.313993][ T4660] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 112.320980][ T4660] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 112.347146][ T4660] vhci_hcd vhci_hcd.0: Device attached [ 112.374709][ T4661] vhci_hcd: connection closed [ 112.390780][ T75] vhci_hcd: stop threads [ 112.401553][ T75] vhci_hcd: release socket [ 112.404633][ T4665] loop0: detected capacity change from 0 to 512 [ 112.406049][ T75] vhci_hcd: disconnect device [ 112.432430][ T4665] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 112.551778][ T4665] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 112.571866][ T4665] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.666938][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 112.995692][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 112.995708][ T27] audit: type=1326 audit(1756331501.370:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4673 comm="syz.4.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65fd8ebe9 code=0x7ffc0000 [ 113.025625][ T27] audit: type=1326 audit(1756331501.380:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4673 comm="syz.4.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65fd8ebe9 code=0x7ffc0000 [ 113.049379][ T27] audit: type=1326 audit(1756331501.410:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4673 comm="syz.4.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fc65fd8ebe9 code=0x7ffc0000 [ 113.077201][ T27] audit: type=1326 audit(1756331501.410:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4673 comm="syz.4.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65fd8ebe9 code=0x7ffc0000 [ 113.108251][ T27] audit: type=1326 audit(1756331501.410:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4673 comm="syz.4.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65fd8ebe9 code=0x7ffc0000 [ 113.197339][ T4676] loop4: detected capacity change from 0 to 512 [ 113.213615][ T4676] ext4: Unknown parameter 'appraise' [ 113.368353][ T4616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.80'. [ 113.560496][ T4681] sd 0:0:1:0: device reset [ 113.674055][ T4685] loop3: detected capacity change from 0 to 512 [ 113.808780][ T4685] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 113.883348][ T4693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.107'. [ 113.893934][ T4693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.107'. [ 113.897326][ T4685] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.904754][ T4693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.107'. [ 113.928660][ T4693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.107'. [ 113.938118][ T4693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.107'. [ 114.020553][ T4696] netlink: 25 bytes leftover after parsing attributes in process `syz.1.106'. [ 114.061644][ T4685] EXT4-fs error (device loop3): ext4_do_update_inode:5254: inode #2: comm syz.3.103: corrupted inode contents [ 114.130544][ T4685] EXT4-fs error (device loop3): ext4_dirty_inode:6119: inode #2: comm syz.3.103: mark_inode_dirty error [ 114.147751][ T52] block nbd1: Attempted send on invalid socket [ 114.154494][ T52] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 114.184144][ T4703] MINIX-fs: unable to read superblock [ 114.212182][ T4696] netlink: 'syz.1.106': attribute type 4 has an invalid length. [ 114.246165][ T4685] EXT4-fs error (device loop3): ext4_do_update_inode:5254: inode #2: comm syz.3.103: corrupted inode contents [ 114.356740][ T4685] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.103: mark_inode_dirty error [ 114.398402][ T4702] netlink: 'syz.3.103': attribute type 10 has an invalid length. [ 114.448262][ T4702] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.456117][ T4702] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.552354][ T4702] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.559827][ T4702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.568235][ T4702] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.575592][ T4702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.636705][ T4720] netlink: 24 bytes leftover after parsing attributes in process `syz.1.115'. [ 114.669123][ T4702] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 114.697686][ T4685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.103'. [ 114.721839][ T4685] device bridge_slave_1 left promiscuous mode [ 114.740821][ T4685] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.770978][ T4685] device bridge_slave_0 left promiscuous mode [ 114.786901][ T4685] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.890644][ T4685] bond0: (slave bridge0): Releasing backup interface [ 115.115291][ T4274] EXT4-fs (loop3): unmounting filesystem. Connection to 10.128.0.236 closed by remote host. [ 115.321667][ T4731] device syzkaller0 entered promiscuous mode [ 115.391165][ T4734] netdevsim netdevsim4: Direct firmware load for ..€ failed with error -2 [ 115.426777][ T4734] netdevsim netdevsim4: Falling back to sysfs fallback for: ..€ [ 116.512223][ T4406] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.734619][ T4406] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.845893][ T4406] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.900661][ T4406] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.448673][ T4406] device hsr_slave_0 left promiscuous mode [ 119.455620][ T4406] device hsr_slave_1 left promiscuous mode [ 119.464091][ T4406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.471753][ T4406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.480656][ T4406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.488312][ T4406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.496257][ T4406] device bridge_slave_1 left promiscuous mode [ 119.503868][ T4406] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.516057][ T4406] device bridge_slave_0 left promiscuous mode [ 119.524283][ T4406] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.552764][ T4406] device veth1_macvtap left promiscuous mode [ 119.560004][ T4406] device veth0_macvtap left promiscuous mode [ 119.566135][ T4406] device veth1_vlan left promiscuous mode [ 119.572514][ T4406] device veth0_vlan left promiscuous mode [ 120.002470][ T4406] team0 (unregistering): Port device team_slave_1 removed [ 120.041123][ T4406] team0 (unregistering): Port device team_slave_0 removed [ 120.078884][ T4406] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.121942][ T4406] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.504617][ T4406] bond0 (unregistering): Released all slaves [ 120.965653][ T4406] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.035440][ T4406] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.100397][ T4406] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.173268][ T4406] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.267143][ T4406] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.341682][ T4406] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.394782][ T4406] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.481851][ T4406] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.563103][ T4406] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.611602][ T4406] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.671253][ T4406] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.711156][ T4406] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.815230][ T4406] device hsr_slave_0 left promiscuous mode [ 123.822497][ T4406] device hsr_slave_1 left promiscuous mode [ 123.829516][ T4406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.838755][ T4406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.846634][ T4406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.854134][ T4406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.862055][ T4406] device bridge_slave_1 left promiscuous mode [ 123.869134][ T4406] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.878161][ T4406] device bridge_slave_0 left promiscuous mode [ 123.884744][ T4406] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.898259][ T4406] device hsr_slave_0 left promiscuous mode [ 123.904688][ T4406] device hsr_slave_1 left promiscuous mode [ 123.912257][ T4406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.920118][ T4406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.928525][ T4406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.936340][ T4406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.944760][ T4406] device bridge_slave_1 left promiscuous mode [ 123.951475][ T4406] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.961418][ T4406] device bridge_slave_0 left promiscuous mode [ 123.968121][ T4406] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.980383][ T4406] device hsr_slave_0 left promiscuous mode [ 123.987181][ T4406] device hsr_slave_1 left promiscuous mode [ 123.994437][ T4406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.002488][ T4406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.010816][ T4406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.018603][ T4406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.029929][ T4406] device hsr_slave_0 left promiscuous mode [ 124.037318][ T4406] device hsr_slave_1 left promiscuous mode [ 124.044456][ T4406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.052286][ T4406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.060841][ T4406] device bridge_slave_1 left promiscuous mode [ 124.067454][ T4406] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.075746][ T4406] device bridge_slave_0 left promiscuous mode [ 124.082420][ T4406] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.145017][ T4406] device veth1_macvtap left promiscuous mode [ 124.151310][ T4406] device veth0_macvtap left promiscuous mode [ 124.158033][ T4406] device veth1_vlan left promiscuous mode [ 124.163965][ T4406] device veth0_vlan left promiscuous mode [ 124.173072][ T4406] device veth1_macvtap left promiscuous mode [ 124.179391][ T4406] device veth0_macvtap left promiscuous mode [ 124.185508][ T4406] device veth1_vlan left promiscuous mode [ 124.192247][ T4406] device veth0_vlan left promiscuous mode [ 124.199938][ T4406] device veth1_macvtap left promiscuous mode [ 124.206215][ T4406] device veth0_macvtap left promiscuous mode [ 124.212792][ T4406] device veth1_vlan left promiscuous mode [ 124.219018][ T4406] device veth0_vlan left promiscuous mode [ 124.832317][ T4406] team0 (unregistering): Port device team_slave_1 removed [ 124.870710][ T4406] team0 (unregistering): Port device team_slave_0 removed [ 124.907929][ T4406] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.953246][ T4406] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.330388][ T4406] bond0 (unregistering): Released all slaves