last executing test programs: 4.286134669s ago: executing program 3 (id=146): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket(0x8000000010, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10) write(r1, &(0x7f00000002c0)="fc0000001c000704ab5b2509b86803000aab087a0400000001481193210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) 4.096115332s ago: executing program 3 (id=152): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xae, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) kexec_load(0x8, 0x0, 0x0, 0x100000000000000) 3.930848125s ago: executing program 3 (id=156): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x9032, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000b00)='ext4\x00', &(0x7f0000000b40)='./file2\x00', 0x414c84, &(0x7f0000000500)={[{@inlinecrypt}]}, 0x1, 0x775, &(0x7f0000001180)="$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") r0 = open(&(0x7f0000000100)='./file2\x00', 0x147842, 0x9c) preadv2(r0, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x7) 2.783996048s ago: executing program 3 (id=171): getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000080)={0x9, [0x2, 0xd8d1, 0x5, 0x8, 0xb3, 0x9, 0x8, 0xb6d9, 0x9]}, &(0x7f0000000180)=0x16) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x4c844) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 2.734573378s ago: executing program 2 (id=172): r0 = getpid() r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) statx(0xffffffffffffff9c, 0x0, 0x6000, 0x40, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r4, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000001ec0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00'], 0x38, 0x40044}}], 0x1, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x1, r7}, 0x38) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000020c0)=[{{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000080)=[{&(0x7f00000004c0)="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", 0x1000}], 0x1, &(0x7f0000002400)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYRES32, @ANYRES32, @ANYRES32], 0x10, 0x10}}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000001540)="ab767c784b6bd4b082c9ef7f82382222b8b36886774e266acb0284bed75d066602964a94e67668b8104a6790519f90edb86bbbce67c51ddcc186d1beff3079591482779b4842893248e4427b823546fded67b79fa86fb8cb79000226fb147d8cb0853653f1078dd6ef07cd27e42ead2b3c8e709bfa2203277ab2d4aeaa7585fe7b564b97d5f51d5764f7c8ffc034b64b6f400469bf6def02e42c0d3b69589d735c99b21a9c80ef9cbb25c929bb05a50a728b3d55a350a483101455f09e19bbfeac55c0de7236cdc5059406aef79b", 0xce}, {&(0x7f0000001640)="fc584577a4edaf65feba6e26389bf41f1cfe4ae90c4ceee9c6f877d31910b6dc716a9510ddebf60e1f5b512fe2c58043d3c1be73ea5c3b7b993a8367162960bfddb3535618f5ce1233e3fb1d0ff223ace558a5b96055fbae932bd97c2f7e5aee91e9f02c136bbdc82760d4", 0x6b}, {&(0x7f00000016c0)="071badeddd7d9021337fd812ded538ac86288b1843fb4877d8a5983cebdb89a5b20ef51fc82e502258c16174aadf33583ba7f6a8857c27069987cc60ff853426fdf26d281d241ad3b0e549b1c9e1d294cd6eb75d7af66e00ae9cfcba1e0d109c36", 0x61}, {&(0x7f0000001740)="a83cc32e220787f615dbb875817ef9253aa12db62e13ee13cd4367d72b3d02c55dc03dab67a6ee5fb1678977a8e7067d8e5584093b36d6ae8d061eca5146749109bc0e31af9f372a4acc6cff8c477be988c9d6ca6d800a17ceae5d", 0x5b}, {&(0x7f00000003c0)="f53a5615cb700cff28297fea04acc320bad9a98787a80b470e2e4a", 0x1b}, {&(0x7f00000017c0)="9cf53bf64c05b88d7324ee822805505f5e6b71d77b7726d551db2e7a9563594a9b54bf8b37ca94ca7d64a1692c577eec1c197e3d334f784c6ed19888a5bad40657fca40464aed0f9f9a19517bf24feab5d6677", 0x53}, {&(0x7f0000001e40)="54bbed5a45204c07e5995ad1f18b8ffce5df16e4ee5cb1f94bb6982f859ba0ff528672f604ba5f34d8c2bc9610e614b67803374e5379a86bdf15a116183f21398decf71c28e0807f182562f7d1fc7a7168fb1e41d4695d3a9f9311c900"/103, 0x67}, {&(0x7f0000001840)="df69ad3b8fe342f79537b608b0fa5b2ca950e553a5bc7fa04992df773c53540e89", 0x21}, {&(0x7f0000001880)="0317f58ea8230aaef12959442607b54c17422f04a635e115f7fcf09313b9ad9ebf80c36525197b9d0927ec88f3fe329e528372dc6d32ffd66fc1bc6a39914bdd5077ac1016dcad7293a36adf5c25fa958608b87386924a34d3d45368e3d5584adda7b94f80205519c898a5035918e1994ce0544caea04ebc26e6c80ebf98", 0x7e}, {&(0x7f0000001900)="f1f268f371de5da960a1457e7b69bcc188c414be18d4a54eaf7310260cbe549c14b58bd89cbff2980e1dfe2ff0db3cb11eacb4c7070b1cf0bce335c635b0f85b7da49e0b2c859035ce16225743be1c34f76d506a81851f9c7b854087ecbae1b7a367a2a83e44c22dd8001c3d8c56", 0x6e}], 0xa, &(0x7f0000002180)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=r5, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32=r2, @ANYBLOB="d2596d18cbdd1d069d60c45a94be5890360e0000005a26ae9aef0112f3a7c34d4df61e124ee79d5da0410a6913f3e85b1e9212cee675c93267ef46cb887359d8c275f8c328469b4ffc36b1ff20c7d3ea1727f4278611c33eba749f9a01b952d9d050c4686f86f40000e3807bda70745c5ab74a91123df989f6e9eb11309e0c83a89e0f04520f2cc40a9ee607db2793c0623541042168193f4b9b70c54cd32a7df9313cf1a6c9bf730f536653577c46a09ecaca53add7804353e860ca0acebc3e593074f9d623de98acd87c762f69cc6f93016af856c5a87238823a393930722ad119418162f676fda80bcb957666068cf5494c1811c8bdffb3027e5df30500000000000000ab456e8019c030671182854f9dd68a57301223a9451a8362a0e185ec2dbdd27eefab341c44d74640abd0d7859ac22c623d117c8c9e89cbfa3b11583de573b42682461856c3502c6646b7af83ae068e79b17814395cd84a3ec7d051335d99d54dbce693efaa5cfa8d15fc2a31c77759097d39cbf07dbfeb2a93dd4603df9084002b301a74632fe6b1aafe90a6a3116fe1cd411148b85dfb764d5996e5bb59d08b4585d3f686135810391b0a55b48f9fdac8106934409900c46ba2bffb3f0aae9cbea19c1e0ea778fbad885774c6e7609c9a1d85ceafe031f206c89b63d614"], 0x88, 0x404c010}}], 0x2, 0x14) 1.891318654s ago: executing program 1 (id=181): socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.842839425s ago: executing program 1 (id=183): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000600), 0x181000, 0x0) fgetxattr(r1, &(0x7f0000000040)=@known='security.selinux\x00', 0x0, 0x0) 1.813575515s ago: executing program 0 (id=184): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000011c0)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x50) 1.760407607s ago: executing program 4 (id=185): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x28, r2, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x40}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = syz_open_dev$MSR(0x0, 0xb, 0x0) preadv2(r4, &(0x7f0000000200)=[{&(0x7f0000000040)=""/208, 0xd0}], 0x1, 0x101, 0x7fff, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000b00049d210b71fe969abbaf2eaa3f1242d6b1d7050e6055843dc7ea2e388374ce6837a3488d3eb67d56831fa92c0f87022699f91820610df2c8524a74b30d8d1f4730928cafae0fd319cc7fa26f061f3dee9068c9abbf5b0f6f96428a0a0148f9da5236e5a6c0fbf62b00a72eb0110f6575459ddce66608e1a14dfc6cc4ebe46a9859361d7fb52dbcbb80f4e8bef6f1ff354a00e47fd3bc5fa30987e0b5ace3fa350318bbe2804e4edda5d011df2ae6da8d8032afe7e8b77ae0e5b7cfdfe8d0674c5c71277d7eb4d8400000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000040)={&(0x7f0000000500), &(0x7f00000000c0)=""/107, 0x0, &(0x7f0000000400)="b765717ede6fbb820bb5b4b8e8950f48ff46075e2087e86310225da93d35f567121846f591eea1b8030a2fb86ea53c5a3633a49dc0ef8b796a063db9fe6aa1cac4916d81ccb579963cc7474e5b1049022dbec1c7782d2e63e4fe7e32caf3fcbd0f4f30226877ad2bbd9b2967f460fe82aa8deba2af58a30d920803c9116a2ee1f5b8ed02baf8bcf2f9e1b0303e6e61224c10", 0x8, r6}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='mm_page_free\x00', r5}, 0x18) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 1.759886327s ago: executing program 2 (id=186): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x9, 0x0, 0x7ffc0002}]}) sync() 1.680363289s ago: executing program 1 (id=187): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket(0x8000000010, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10) write(r1, &(0x7f00000002c0)="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", 0xfc) 1.680147308s ago: executing program 3 (id=188): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000001640), 0xc0282, 0x0) fchown(r0, 0x0, 0x0) 1.620738119s ago: executing program 0 (id=189): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000000c0)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x4e22, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x7, 0x100, @val=0x80}}}}}}}, 0x0) 1.62062653s ago: executing program 3 (id=190): syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) 1.537195571s ago: executing program 1 (id=191): sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="d022750de3148156fa0c0e873ab87f56363ed14bc3dc96f8da1093d7f6b9e2925827191c", 0x24, 0x40000, &(0x7f0000000200)={0xa, 0x4e22, 0x100, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x80000000000000a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000003c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x4e21, 0x0, @local, 0x20000}}, {{0xa, 0x0, 0x81, @private2={0xfc, 0x2, '\x00', 0x1}, 0x400000}}}, 0xffffffffffffffc6) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048084}, 0x4006) 1.444388513s ago: executing program 0 (id=192): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) 1.444218333s ago: executing program 4 (id=193): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x800000, 0x0) chroot(&(0x7f0000000100)='./file0\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) 1.440713043s ago: executing program 2 (id=194): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000180)=0x5, 0x4) 1.338698435s ago: executing program 2 (id=195): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000150081044e81f782db44b9040a1d080206000000040000a118000200ff05000000000e1208000f0100810401a80016eaa400010000005f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e00600000000d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bfffdccf85df947e5e0", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_io_uring_setup(0x2487, &(0x7f00000004c0)={0x0, 0x86d0, 0x8, 0x2, 0xd2}, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r4}, 0x9) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="ff01000000000000000005000000180001801400020073797a5f74756e0000000000000000000800038004000380"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000580)='mlxsw_sp_acl_tcam_vregion_rehash\x00', r6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000240)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) fcntl$lock(r2, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x200000007}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x8000, 0x8000, 0x7, 0x8, {{0x1f, 0x4, 0x2, 0x4, 0x7c, 0x64, 0x0, 0x5, 0x4, 0x0, @multicast1, @multicast2, {[@timestamp_prespec={0x44, 0x14, 0x93, 0x3, 0x7, [{@empty, 0xd7}, {@remote, 0x2}]}, @ssrr={0x89, 0xb, 0x35, [@private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x3b, 0x2, [{0x5, 0xf, "65dd96432085bd026de50be5da"}, {0x5, 0xf, "d14c24bc88d5357265b123f1a3"}, {0x6, 0x3, 'S'}, {0x5, 0x4, "bbc8"}, {0x0, 0x10, "55a20cc9799a1cfdfe515372419e"}]}, @timestamp_prespec={0x44, 0xc, 0xa, 0x3, 0x9, [{@loopback}]}]}}}}}) sendmsg$802154_dgram(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 355.012453ms ago: executing program 4 (id=196): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000e00)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x20, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x50) 349.944744ms ago: executing program 1 (id=197): r0 = getpid() r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) statx(0xffffffffffffff9c, 0x0, 0x6000, 0x40, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r4, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000001ec0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00'], 0x38, 0x40044}}], 0x1, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x1, r7}, 0x38) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000020c0)=[{{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000080)=[{&(0x7f00000004c0)="f241dc339ef35de2e7dcb23d5d8418eb267422ab19d910705766189ab818b3254c4a244281a39301f8a64daa49a6c99e08c0a64fd247d3268cfcfb7d5e2881e57cb76ef60c27b9128b6c18efe4e787e4b810dd1a31396cd9a4f2f60e61ce58a360576256423b1fc3679dcc337b1b4e7844ca18bba6fc38e9cb386c76ffae2f9db5a84691bb0dbef75f2bb6b73b6ddf701885c0d69a6e7a11a5553ebd7be55d2af9ae798637a7d927c75f3a732773cb0962a5ea4fbfd0f55d7be1dfbc4e710a1cca15aa2b654c931b0fbb8ee7fad08657e0e8257c9d72494f47577429635c0d624503da571f43eca874bf89f7edafcea09d0f5321713ced0175ed69da0af3724cffd8e65248fcd6775dc7ce05aca2278f51e028138134c0672ae3991a12e854f1f4a0b4362590ef865f45cac442be4025e697b2b7dfb79a069528fb2412d8a02d7f6cd12d4e1a4dc1872b1c62cef9288f6905fcd94766dd6836ec994b081c05eaa305e30ed720386c4f09c43663dc323be21534fc0bdf89a243a409f34a26f9875b85d6d5719cb64d0c5c2e8c4d505f17384b4ca91d678a3f1472148e98099de7e2e580e31b827fb977afba8938c09a0d7caf0d8f95eebf11420eeb96b83e384d9f13d28bccdba8e341c9b3b4c80fa4cd495f66765feba29ed812dd42f7d0ff78b387f0c6c541152cb0bf25135bd1655b6ff80b376cf63b1f6b63d3c9fd4240d5202232ea2b831c65b3dfe44dc2d1d56177389e9e56a61dd81a5d892e9f0ded7c8386baeb9b277e80d11aa75b9d617f2a4b32035e492383c993852e83fe7234d728755cc990ad109c81c7173945a4bac314c719a6148752ac64ed986f3b55c11bd045389acda449c544e929f7d020072b5ec5b1fce7e8908fd268a47c4e17027f860758b59f9fe08249914e529914c5024802d5a81d45c3424907da8cb5cf35dccea64259d0d67916ac2c62f97620ee56f7bf00b21c885b23ab6dbe1b589063fb64df0550cab4b226ae0e4266b206b77d18b8ce798705c5741cad40b362f7ac59768ff121841ee201c98fca18b0d64018fe735e8b343f53bb82ef7ca0f8b8fc5e0ae87f43de461d037ea6d6fa3cc94ba37a0a71f1ba21e09747939c33becdee9f76216304eae9c12d93a84484ff2565cd65a903575de577c5d746430ab7aac3c52e258a22a235cbf8891d7d1b32cd12d1e77b96cd067eaf858aeaa2222db7f1ba9bfb1a61a2ebffb07332f3441162e412fbf859bacf8d0c73a8dd033cdf2411fccc13fcd68dd76ef0d59d2ce63b8e3ce81638be376d3aa576aa44b5612b3941446f192f23c26a064a6e666aa886dd5e9ee1cb8089c0ae3eb00246786a167b0a915cdaced8d255f4ab2d70a321f88acc451099db102f5457f5cbb8018c8dab8e1202ee8d40153e53d1d04a398d03c20ee5a5c2390e880e5ef774dd1d62224ebe23fd7e56790db4f8ca6a3c78b46092c5780d177814319e585f116a3d8e397516ebb64d963ecd63052160fa476442629b37ffdc98c3ef8d879a4070eb3b54fe9d1855566fc89873122884fc599edc1d0533bd3a5df618dd54375b5ce67b5d73a232f41a65c25022e363656e3765f4021868f23a9a7008c0c3190dfc619252fedf6898b6e4f5e24d0dde8d5038a09d5f4f5c2ecf7245f910a0027503202b597066645e73024fe57dd7273dc27efa05e5fc560c88bf44ab15166a3707d5a5fd47f82ee41a664d2e097482992b3e488a1ea669570dd7b5c163e5c714d1ecf138fa0a534c684f7baf10d6a087190b9aa153aed615d796ab85d8819cd9aad7ef5c399edd8be71c0ae402240a24d6d7948211a5b6e3fe30730269d8a4372858d045c38d2a57136743c9e4c5076d53d1ef95f0f22ea384c61e4493d721cfa0aeaa5befbc11c7f1fe1ce1d28f50290a899c1295169c8cb4e1a408ec2e9417019d5157d87b0f1c3c7d3b3d35e0d2dd32562344a9161d3d660b20e431ba2af601a1f632e2a28f8a553e855ac9ee57c1518060b8b8cc44119b0d42db5a13e524d15bf04a61247d82b9f1147bc508291ff31e53f86b414de0f54008ce94036112dfe4acb2f6a0975226ea622faac58a9d2a4ce608e259f4273ed535db3b7d1d5f9d671e6c9c1a737d53e4658c2f53ba6440b8288075e2208b0ba0bcb6558681e53c7a36d4e3981df044fb59168b22f00244525dccbbd77fa80c70dcb923b326519c41ed0f8da30290b1d703c9f6140514db4a505b12099ec33324979720d990bf6fe05f9b2403f51c31c4db5d9765a86c092eb26d6ad461d300ff862b40ca032e466cacebd0b8141ae22eef5801b698d190b6fde41d5089279450afda9595f23c1ac08f995b94cc6ad4a4d983ea531b253e66e358cd1aa26c22192e12e1632ec8ad8dd55f56d0229a8164a6b5ed8298e17e6f370d4f95e1b8dfaf0af2cffc6486066e7cc69a9d366746b8912ab1f769d04944d8afcb5e92d1ec97f223f3c3d387febd9fe5e74bf1aa0b33b783e9190b6d983d047dbcf94942f099dd752d31c9be856c1198e6d941938e5b863a8d7dc3436337801cd139a4a6b088a66e2df65af7d8e950a4c5eabc990f599fe62da54d528fe4cb0bb6f6fa0f68679866aebd28d701cd834a6565560713afd4a76ec060a9ca0a82b24afb18cdb3dd4ab4de343e5243f88beb0b475f48f00be489504aeeda05dbeebd90869b134b56305830a5eec12961fbc17247a89d8fd719939f9c02460d0a56808c89385130f3e96c5b0c22bcd4e8c2d315dfe1936a3ffa00a1328d3852499f6a76f25dd67c256d92e3829a9a7fd0c70f895fb11d351bed40d3a2d996dc2ab225ddb7db9c73669cc2e5dced6b714077bb525ae9e81071f1bc114a8525075f7657b22b5c8db84d0f1297ce3edcc8888766a13a7b02340414a27e5751bcddd8647cda34ba36d496291a3eef8fa32710ea76bc698cca9112b75034b7948544bff232fdba11fa6f4435da634b05eabaad51682529744ef3cdf4c7ba6922698f294df82d86f061a8cf652a2defa69d2401de654a67eb5cc80cf3d6d7cf3782a5a1c546c38bf06cb9ccc4073c779b8a1bf3ea7b6192174deb4e1f266d36bac90b7abc0dcb100bdcc1266f396d2f5c71276ca57a8381a66a160c5080d103792bea86562ca776b3e293f16b3acaa461d4a5ff3470228b0d3f046b7d6e497b532a507cb4e4601386466ee4f683d5c5dff4576cc30dbaa922af414dea871500022cd1559945d5f4c60b023e84d31f3f1332b2dcbecc28d4c6def25e02fc9530b0bc4c0096d7fb82f25bb23ff7e49fe2dd582a599fff1a109c00ee65c1da12a7bfd9e800bfb5d54f3b78618335aa14073e9243e3a4d97def641c2e26c71ef36fb99d27bf2a0d616f6c64e7d14321f98328a7d6a0c234d26e1a7fbd2e09f3a7f13209d5a41eb09fef0e9be56f7b20cc32c70f6cf6458b307f25ffc559b2f2ac89c92a6ee7fea1725ba27fb483b5cee4960dbb968fc5227321181e8b96cedefaced9277ba91fef769c4f594760c12fb41056bd247571617407bfa3ed777abb85b87f66af94bdc5f6be9e589635c3ae14373d7c8b4b3e262b09b0151e8778951fd80cedfeadec5097f2fb53a22aba459338bcd6149328ae24b788314bfc3f2505ac78657c524734bf85ab42035ff1e57e2fca2f8c13101f36ada028779f7fca867878ba83dc7f7cb7f5ad10678b27a6b70012311960bb1110be384bea533f46f59a2d46f1b93a5605da7c1c693d395fed324c8226af25cb48dd71a069fb74c2794b3f05803b1d9c688da4ee15e64948e236955a1abf1bdb192bb99fae9cbfafd760b70bce5e29434541799444fb33163db27384d8bf4f24cbe7a9964da84b703706ff9de5e488f2a96483c0eef0c0fccda06bfe285a0e6a5761f917663a3698feec93fb5ee9bc35ed6473796fb17eb63221439a5a9a101e570e0b89a7b55b30e5cf0149f74859093737e5723c8ec1e5c57c4a335aa42870d13e5d115ff3aa8b480c63a75c6abfd025d7991b22b6370aca66801d64b0c26ac0ccc5afae81ce3b61d1591aac40f87033bdf40e0c6e235590666dcf2746ea3a26daa5ee5d52123da7ba2ce487b2a59106d7ca3a896e265f8609cce023b086622bccb96f7b6c3ace8f9dee9882bc86204e3b3924df60e013a557a3695f203b37ad058d9354d7c15cefa20f7d5bd974f12b55a41b23e447d4b715f3fbee7338a632a95ea8bb0c192785f7509a4302cdb194374c906791ca45f360add63da7185a61c4e340eff7e467ed00aa40a3460aad5966fdde86e15a03cbc5fb00f2a374edb4126439d221a32b3ffc4cb181593b8379fa8ec00d5d833fc7f38a98d8bc6bcc2b4f5571080a6cbbb39fa3c5dd79949e0c2197a47221225f9c9fc9881dcecc34d7e47b86929d72bdc249cd30b22176b9295f255be47130e3729e4ee566eb67237ae4d213968403422d9c536c7d1496812d222d48191797a57564904177b060ca488f081637c9942b0cff6f49326ae545e8d60ebcce6d51b8fd59cd7bac92dcbdceef63b1c45e2b668c1e122646df9cf22d5a15f51e7c7d795c02d428dd16eb84b063a08e6f632a3d6ee45be5b429c93e81afc6c8e6f46b0659d179774a68ce168e05d7b58cdc54449033652e115a4481e706b3f827393fc69e835bc400be2124d91306ab7b4690326482d0ca5f1be6b92f2ea7a9340638e1deb2802471d07d066a2290db6858cdbb46c790707c60ae1430ae104362c9063a5c1e9dcc20ebe3ec000538fedea9ba214b2f9b2771da04ba994a5eea381153a5de06e327cac240cec734e9cc1040a216b274e7462dc0f59f5b5f560ea15769c9be77d0ad11a68468bf8a348c3cc4a3e0b2d90cedac378086a2e1aa2bcc6fd35e928d1cd4faf5d4a512ad85bd3e9da8b38a577479bca4030f7ac2fd6f1fe7b4bbccfaee396d3019c3ccd249734730b9253389e65bdb83a8f25b7b9e2afd95c2b1463bc47f953a8cf40a3b1e413420c3fba4486afc34d0891d51c829b6166cf0f99b349cc54e4c92f186759907cfe8952f69ad00b69e75b04c797d2f298fc31b4848577ebf3d97c219628dd763b54d2ebdd82e4dc4263f81113eb7b3f86d329dc11bf49dcd1794bb10d813ef003b4630f43a075f41132b993d52fde4bfdf39ac85e7472f8dcbe5c7b8cdfd83310cdc3d93a12bb765800545b9c856f5f62a948069093d0cc002988c20eeb1d15f190e131d69623dad27a5459189572ea6ad5e24407f7b6129bc786b586a1d683dc83e2c96a85fbdcef670affd0437086a2f6f801b51d93cda6523c87df44dd594f42329e25820666c4e04b146e5f91b628bdfd62e89c3ca5e0c3b4df0816491d6f391c1cfb0b684f7e97a8074ca19f8edae86d9c15471c4168f108e570cb479ed1542d37d18ae5be2a4eb3fbf4b9c6ab7834d61f1323dd6decc8af961b01a0c9e8cba008a2da43c32e807d544c82955bd572154888f52a5972cf5551017156c40d5c1762ef48122ae285b16a3168b0c16397b0dce7795cc5f00354f725058a85f06706b1108b7118ea8b29ff6e774a7b83844bd1b46224f2936fe0cb0dc59325d4ff750c63199ad8820b1adbdcffff433281f486f3b072e5e980b914597c2550d5067806f6f1ba3d203c03304a2c907a04e1ce40b9c8c878791363e7732ee0419abd285328f391f6a9a5ac323dd4a5c77eb5eece85a28cd7712d26d71d1198657272fc0880895b176968cc1f0d22b905e46c6f0535ccd8a7eedbe20922150d6368a57396418c8eb80bb9220081a0a2498d4cafda07706e8c913beae0c929510", 0x1000}], 0x1, &(0x7f0000002400)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYRES32, @ANYRES32, @ANYRES32], 0x10, 0x10}}, {{&(0x7f00000014c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f0000002180)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=r5, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32=r2, @ANYBLOB="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"], 0x88, 0x404c010}}], 0x2, 0x14) 316.809864ms ago: executing program 0 (id=198): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x804) dup2(r0, r1) 260.482175ms ago: executing program 2 (id=199): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r1, 0x2) recvmmsg(r2, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/31, 0x1f}], 0x1}, 0x404}], 0x1, 0x0, 0x0) 258.044915ms ago: executing program 4 (id=200): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ff8000/0x4000)=nil) 126.250328ms ago: executing program 0 (id=201): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket(0x8000000010, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10) write(r1, &(0x7f00000002c0)="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", 0xfc) 126.082307ms ago: executing program 4 (id=202): r0 = syz_io_uring_setup(0x3b51, &(0x7f00000006c0)={0x0, 0x7758, 0x1000, 0x8003, 0xdd}, &(0x7f0000000040)=0x0, &(0x7f0000000ac0)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r0, 0x10007b0f, 0x96f0, 0x20, 0x0, 0x0) 98.076188ms ago: executing program 1 (id=203): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000181100", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x53) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001340)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x24004800) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 24.419889ms ago: executing program 4 (id=204): unshare(0x2040400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000100), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000001300)=@gcm_256={{0x304}, "67c3f71b0f188109", "2c9e910757c2725dd5795f705ac44b9d43498e33fe93a0c9001c5c65f7107d0d", "ddfb00", "5a3e2c1b40238e79"}, 0x38) 16.45384ms ago: executing program 2 (id=205): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @loopback}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x38, 0x2007, @fd=r1, 0x100000001, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=206): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a30000000002c000000030a01010000000000000000020000000900010073797a30000000000900030073797a32000000003a000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xa0}}, 0x8040) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.104' (ED25519) to the list of known hosts. [ 56.854095][ T4170] cgroup: Unknown subsys name 'net' [ 56.987992][ T4170] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.475138][ T4170] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 59.888068][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 59.990982][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 60.052504][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 60.085941][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.095037][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.103814][ T4182] device bridge_slave_0 entered promiscuous mode [ 60.135981][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 60.145664][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.153290][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.161408][ T4182] device bridge_slave_1 entered promiscuous mode [ 60.185810][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 60.235208][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.242567][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.250358][ T4183] device bridge_slave_0 entered promiscuous mode [ 60.285742][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.297207][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.306753][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.314056][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.322620][ T4183] device bridge_slave_1 entered promiscuous mode [ 60.362985][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.370068][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.378938][ T4189] device bridge_slave_0 entered promiscuous mode [ 60.408134][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.416258][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.424316][ T4189] device bridge_slave_1 entered promiscuous mode [ 60.448590][ T4182] team0: Port device team_slave_0 added [ 60.457012][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.496381][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.507097][ T4182] team0: Port device team_slave_1 added [ 60.513395][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.520474][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.528471][ T4192] device bridge_slave_0 entered promiscuous mode [ 60.538166][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.547394][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.554722][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.562720][ T4181] device bridge_slave_0 entered promiscuous mode [ 60.593605][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.601002][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.608823][ T4192] device bridge_slave_1 entered promiscuous mode [ 60.617550][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.627492][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.634722][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.642562][ T4181] device bridge_slave_1 entered promiscuous mode [ 60.659683][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.666811][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.693460][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.730211][ T4183] team0: Port device team_slave_0 added [ 60.737596][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.744894][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.771133][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.806763][ T4183] team0: Port device team_slave_1 added [ 60.821484][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.834046][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.845429][ T4189] team0: Port device team_slave_0 added [ 60.853422][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.887229][ T4189] team0: Port device team_slave_1 added [ 60.903411][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.921536][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.928531][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.955206][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.995937][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.003204][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.029187][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.047005][ T4192] team0: Port device team_slave_0 added [ 61.053451][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.060421][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.086744][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.110973][ T4182] device hsr_slave_0 entered promiscuous mode [ 61.117656][ T4182] device hsr_slave_1 entered promiscuous mode [ 61.127177][ T4192] team0: Port device team_slave_1 added [ 61.133833][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.140954][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.166865][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.181424][ T4181] team0: Port device team_slave_0 added [ 61.223295][ T4181] team0: Port device team_slave_1 added [ 61.232018][ T4183] device hsr_slave_0 entered promiscuous mode [ 61.238765][ T4183] device hsr_slave_1 entered promiscuous mode [ 61.245581][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.253638][ T4183] Cannot create hsr debugfs directory [ 61.260310][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.267452][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.293567][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.339985][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.347346][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.373539][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.424597][ T4189] device hsr_slave_0 entered promiscuous mode [ 61.431444][ T4189] device hsr_slave_1 entered promiscuous mode [ 61.437908][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.445650][ T4189] Cannot create hsr debugfs directory [ 61.451668][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.458625][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.484577][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.499471][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.506554][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.532623][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.571553][ T4172] Bluetooth: hci2: command 0x0409 tx timeout [ 61.578169][ T4172] Bluetooth: hci1: command 0x0409 tx timeout [ 61.580734][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 61.591510][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 61.609048][ T4192] device hsr_slave_0 entered promiscuous mode [ 61.616035][ T4192] device hsr_slave_1 entered promiscuous mode [ 61.622928][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.630492][ T4192] Cannot create hsr debugfs directory [ 61.660791][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 61.679169][ T4181] device hsr_slave_0 entered promiscuous mode [ 61.685983][ T4181] device hsr_slave_1 entered promiscuous mode [ 61.693818][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.701606][ T4181] Cannot create hsr debugfs directory [ 61.958734][ T4182] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.977372][ T4182] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.989051][ T4182] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.004206][ T4182] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.039317][ T4189] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.054479][ T4189] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.076407][ T4189] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.085932][ T4189] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.173015][ T4192] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.195439][ T4192] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.227355][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.235925][ T4192] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.259756][ T4192] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.272887][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.284016][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.295131][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.309374][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.319269][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.351947][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.362806][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.375041][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.388741][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.399427][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.409246][ T4227] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.416540][ T4227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.444433][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.453830][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.462712][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.488822][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.502528][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.512471][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.521524][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.528621][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.537449][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.581086][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.589874][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.598796][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.605939][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.617018][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.627055][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.636604][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.645825][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.654426][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.671049][ T4181] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.682227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.693497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.703111][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.710178][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.742549][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.752992][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.761842][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.770127][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.779561][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.788524][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.797129][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.806916][ T4181] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.820542][ T4181] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.834358][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.847058][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.865676][ T4181] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.877773][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.892257][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.924593][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.935187][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.943933][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.956660][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.965686][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.975157][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.984532][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.993702][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.002797][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.019043][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.036455][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.063152][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.070076][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.079310][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.089617][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.106716][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.132788][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.143448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.152820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.161731][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.168810][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.216508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.227250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.236432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.246617][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.253755][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.264185][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.274204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.283319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.292827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.302117][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.309189][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.317095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.326766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.335549][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.342741][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.350723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.359589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.368937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.412892][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.424120][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.434027][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.444016][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.453214][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.462556][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.471505][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.478970][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.487125][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.495435][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.517082][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.535041][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.545373][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.554086][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.563537][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.573290][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.582132][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.590454][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.599126][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.607844][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.616626][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.628589][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.641680][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.649131][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.657556][ T1108] Bluetooth: hci0: command 0x041b tx timeout [ 63.661652][ T4235] Bluetooth: hci2: command 0x041b tx timeout [ 63.665816][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.677342][ T1108] Bluetooth: hci3: command 0x041b tx timeout [ 63.683963][ T1108] Bluetooth: hci1: command 0x041b tx timeout [ 63.688082][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.717714][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.726888][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.735802][ T1108] Bluetooth: hci4: command 0x041b tx timeout [ 63.763384][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.773414][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.806463][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.815574][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.851040][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.859760][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.872481][ T4227] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.879575][ T4227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.889018][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.898776][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.908054][ T4227] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.915194][ T4227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.924289][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.934410][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.943816][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.952994][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.963127][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.972163][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.980102][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.991397][ T4182] device veth0_vlan entered promiscuous mode [ 64.016363][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.033840][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.048637][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.059378][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.071296][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.078787][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.105167][ T4189] device veth0_vlan entered promiscuous mode [ 64.118063][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.128347][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.139867][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.155891][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.166980][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.182476][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.197031][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.206044][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.217513][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.226323][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.234911][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.246596][ T4181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.259467][ T4182] device veth1_vlan entered promiscuous mode [ 64.273411][ T4189] device veth1_vlan entered promiscuous mode [ 64.282697][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.298047][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.352294][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.359762][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.369012][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.378468][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.397834][ T4189] device veth0_macvtap entered promiscuous mode [ 64.414105][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.424867][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.434053][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.499633][ T4189] device veth1_macvtap entered promiscuous mode [ 64.508347][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.516830][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.525880][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.536578][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.545751][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.559662][ T4182] device veth0_macvtap entered promiscuous mode [ 64.587994][ T4183] device veth0_vlan entered promiscuous mode [ 64.603867][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.612868][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.622716][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.631916][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.639868][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.652828][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.668628][ T4182] device veth1_macvtap entered promiscuous mode [ 64.694387][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.702806][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.712405][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.721668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.730309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.746833][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.758492][ T4183] device veth1_vlan entered promiscuous mode [ 64.774496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.785061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.794443][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.814377][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.824383][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.833599][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.845105][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.864748][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.873873][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.882484][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.893325][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.901767][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.912800][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.924992][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.938724][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.953677][ T4192] device veth0_vlan entered promiscuous mode [ 64.963139][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.971790][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.980397][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.988318][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.001928][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.010347][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.023363][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.034762][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.063412][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.072918][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.084555][ T4182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.095039][ T4182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.104433][ T4182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.113438][ T4182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.156884][ T4192] device veth1_vlan entered promiscuous mode [ 65.168047][ T4183] device veth0_macvtap entered promiscuous mode [ 65.176746][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.186781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.195620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.226321][ T4183] device veth1_macvtap entered promiscuous mode [ 65.238423][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.246770][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.257533][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.308959][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.324357][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.335482][ T4181] device veth0_vlan entered promiscuous mode [ 65.362775][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.370555][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.401261][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.404804][ T4181] device veth1_vlan entered promiscuous mode [ 65.409284][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.431210][ T4227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.439276][ T4227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.458660][ T4192] device veth0_macvtap entered promiscuous mode [ 65.468694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.477328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.485821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.495097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.504517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.513416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.523070][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.533850][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.543766][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.554331][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.565893][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.577508][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.589196][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.599173][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.610217][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.622062][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.642277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.650354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.661663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.670324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.680199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.691691][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.699716][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.703998][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.716868][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.726596][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.731701][ T1108] Bluetooth: hci1: command 0x040f tx timeout [ 65.736826][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.748943][ T1108] Bluetooth: hci3: command 0x040f tx timeout [ 65.764074][ T4192] device veth1_macvtap entered promiscuous mode [ 65.772240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.780231][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.787689][ T1108] Bluetooth: hci0: command 0x040f tx timeout [ 65.788975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.794116][ T1108] Bluetooth: hci2: command 0x040f tx timeout [ 65.809988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.811164][ T4257] Bluetooth: hci4: command 0x040f tx timeout [ 65.826585][ T4181] device veth0_macvtap entered promiscuous mode [ 65.862555][ T4227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.885508][ T4181] device veth1_macvtap entered promiscuous mode [ 65.904912][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.923733][ T4227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.926409][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.941374][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.952086][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.962061][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.972982][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.984718][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.007116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.017756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.034573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.044720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.057484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.084488][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.095360][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.108785][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.119577][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.130500][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.143460][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.155112][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.265883][ T4296] loop2: detected capacity change from 0 to 512 [ 67.811992][ T4172] Bluetooth: hci2: command 0x0419 tx timeout [ 67.818420][ T4172] Bluetooth: hci0: command 0x0419 tx timeout [ 67.828222][ T4172] Bluetooth: hci3: command 0x0419 tx timeout [ 67.855822][ T4172] Bluetooth: hci1: command 0x0419 tx timeout [ 67.891068][ T4172] Bluetooth: hci4: command 0x0419 tx timeout [ 68.040602][ C1] sched: RT throttling activated [ 68.050944][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.059997][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.123208][ T4192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.196450][ T4192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.271333][ T4192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.322617][ T4192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.958876][ T4302] loop1: detected capacity change from 0 to 512 [ 69.033013][ T4302] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 69.088184][ T4296] EXT4-fs: error -4 creating inode table initialization thread [ 69.097452][ T4296] EXT4-fs (loop2): mount failed [ 69.115317][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.171279][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.182035][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.192888][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.197737][ T4302] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 69.203206][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.228379][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.228993][ T4302] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2: bg 0: block 248: padding at end of block bitmap is not set [ 69.238243][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.238262][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.240516][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.273763][ T4302] Quota error (device loop1): write_blk: dquota write failed [ 69.273931][ T4302] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 69.313066][ T4302] EXT4-fs error (device loop1): ext4_acquire_dquot:6209: comm syz.1.2: Failed to acquire dquot type 1 [ 69.339341][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.346964][ T4302] EXT4-fs (loop1): 1 truncate cleaned up [ 69.354981][ T4302] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 69.356794][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.400256][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.413813][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.424465][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.435506][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.446159][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.456816][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.458509][ T4302] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 69.467103][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.486360][ T4302] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 69.488847][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.504671][ T4302] EXT4-fs error (device loop1): ext4_acquire_dquot:6209: comm syz.1.2: Failed to acquire dquot type 1 [ 69.511247][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.545833][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.548616][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.570131][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.576729][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.590209][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.607530][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.629477][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.636996][ T155] Quota error (device loop1): remove_tree: Getting block too big (0 >= 6) [ 69.640410][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.647077][ T155] EXT4-fs error (device loop1): ext4_release_dquot:6245: comm kworker/u4:3: Failed to release dquot type 1 [ 69.665938][ T4181] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.680880][ T4181] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.689629][ T4181] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.699668][ T4181] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.727753][ T4227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.743280][ T4227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.756410][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.821568][ T4258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.850219][ T4258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.879024][ T4312] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6'. [ 69.898386][ T4312] device batadv1 entered promiscuous mode [ 69.927759][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.956385][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.998850][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.028611][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.038140][ T4258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.057638][ T4312] Zero length message leads to an empty skb [ 70.064524][ T4258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.075910][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.083465][ T4314] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 70.518638][ T4323] syz.0.10[4323] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.518744][ T4323] syz.0.10[4323] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.665000][ T4323] sch_tbf: peakrate 64 is lower than or equals to rate 17038211371681383082 ! [ 70.881873][ T4335] loop3: detected capacity change from 0 to 2048 [ 71.177924][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.188027][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.238881][ T4335] EXT4-fs (loop3): failed to initialize system zone (-117) [ 71.246552][ T4335] EXT4-fs (loop3): mount failed [ 71.451809][ T26] audit: type=1326 audit(1758318296.140:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4322 comm="syz.0.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e03a6c29 code=0x7ffc0000 [ 71.889448][ T26] audit: type=1326 audit(1758318296.200:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4322 comm="syz.0.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e03a6c29 code=0x7ffc0000 [ 72.056605][ T26] audit: type=1326 audit(1758318296.300:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4322 comm="syz.0.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7fb6e03a6c29 code=0x7ffc0000 [ 72.205173][ T26] audit: type=1326 audit(1758318296.310:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4322 comm="syz.0.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e03a6c29 code=0x7ffc0000 [ 72.260792][ T26] audit: type=1326 audit(1758318296.320:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4322 comm="syz.0.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e03a6c29 code=0x7ffc0000 [ 72.449160][ T4345] netlink: 'syz.0.14': attribute type 12 has an invalid length. [ 72.669054][ T4355] netlink: 580 bytes leftover after parsing attributes in process `syz.1.18'. [ 73.101627][ T4366] lo speed is unknown, defaulting to 1000 [ 73.108430][ T4366] lo speed is unknown, defaulting to 1000 [ 73.125019][ T4366] lo speed is unknown, defaulting to 1000 [ 73.154437][ T4366] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 73.202422][ T4366] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 73.326364][ T4366] lo speed is unknown, defaulting to 1000 [ 73.339824][ T4366] lo speed is unknown, defaulting to 1000 [ 73.353318][ T4366] lo speed is unknown, defaulting to 1000 [ 73.366317][ T4366] lo speed is unknown, defaulting to 1000 [ 73.379842][ T4366] lo speed is unknown, defaulting to 1000 [ 73.393962][ T4366] lo speed is unknown, defaulting to 1000 [ 73.900948][ T4373] lo speed is unknown, defaulting to 1000 [ 74.131448][ T4379] hub 6-0:1.0: USB hub found [ 74.139570][ T4379] hub 6-0:1.0: 1 port detected [ 74.180000][ T4379] netlink: 20 bytes leftover after parsing attributes in process `syz.1.25'. [ 74.966550][ T4386] netlink: 'syz.3.28': attribute type 12 has an invalid length. [ 75.280119][ T26] kauditd_printk_skb: 19 callbacks suppressed [ 75.280134][ T26] audit: type=1326 audit(1758318299.980:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4396 comm="syz.3.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398af67c29 code=0x7ffc0000 [ 75.329027][ T4400] netlink: 12 bytes leftover after parsing attributes in process `syz.1.37'. [ 75.399860][ T26] audit: type=1326 audit(1758318300.040:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4396 comm="syz.3.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f398af67c29 code=0x7ffc0000 [ 75.532868][ T26] audit: type=1326 audit(1758318300.040:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4396 comm="syz.3.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398af67c29 code=0x7ffc0000 [ 75.594160][ T26] audit: type=1326 audit(1758318300.040:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4396 comm="syz.3.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f398af67c29 code=0x7ffc0000 [ 75.725390][ T4411] loop3: detected capacity change from 0 to 512 [ 75.733829][ T26] audit: type=1326 audit(1758318300.040:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4396 comm="syz.3.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398af67c29 code=0x7ffc0000 [ 75.807152][ T4411] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 75.842040][ T26] audit: type=1326 audit(1758318300.040:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4396 comm="syz.3.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f398af67c29 code=0x7ffc0000 [ 75.883514][ T4416] loop2: detected capacity change from 0 to 1024 [ 75.917113][ T4416] ======================================================= [ 75.917113][ T4416] WARNING: The mand mount option has been deprecated and [ 75.917113][ T4416] and is ignored by this kernel. Remove the mand [ 75.917113][ T4416] option from the mount to silence this warning. [ 75.917113][ T4416] ======================================================= [ 75.978013][ T4411] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 75.993410][ T26] audit: type=1326 audit(1758318300.040:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4396 comm="syz.3.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398af67c29 code=0x7ffc0000 [ 75.999549][ T4411] EXT4-fs (loop3): orphan cleanup on readonly fs [ 76.016176][ T26] audit: type=1326 audit(1758318300.040:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4396 comm="syz.3.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f398af67c29 code=0x7ffc0000 [ 76.175625][ T4411] EXT4-fs error (device loop3): ext4_do_update_inode:5204: inode #16: comm syz.3.40: corrupted inode contents [ 76.193514][ T26] audit: type=1326 audit(1758318300.040:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4396 comm="syz.3.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398af67c29 code=0x7ffc0000 [ 76.209203][ T4416] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 76.311075][ T4411] EXT4-fs (loop3): Remounting filesystem read-only [ 76.320304][ T4411] EXT4-fs error (device loop3): ext4_dirty_inode:6040: inode #16: comm syz.3.40: mark_inode_dirty error [ 76.332111][ T26] audit: type=1326 audit(1758318300.050:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4396 comm="syz.3.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f398af67c29 code=0x7ffc0000 [ 76.373843][ T4437] siw: device registration error -23 [ 76.418142][ T4411] EXT4-fs (loop3): Remounting filesystem read-only [ 76.444272][ T4411] EXT4-fs error (device loop3): ext4_do_update_inode:5204: inode #16: comm syz.3.40: corrupted inode contents [ 76.528241][ T4436] netlink: 'syz.4.43': attribute type 12 has an invalid length. [ 76.561423][ T4411] EXT4-fs (loop3): Remounting filesystem read-only [ 76.639674][ T4411] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #16: comm syz.3.40: mark_inode_dirty error [ 76.760982][ T4411] EXT4-fs (loop3): Remounting filesystem read-only [ 76.778448][ T4411] EXT4-fs error (device loop3): ext4_do_update_inode:5204: inode #16: comm syz.3.40: corrupted inode contents [ 76.820898][ T4257] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 76.828613][ T4411] EXT4-fs (loop3): Remounting filesystem read-only [ 76.828653][ T4411] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 76.829020][ T4411] EXT4-fs (loop3): Remounting filesystem read-only [ 76.855856][ T4441] Invalid ELF header magic: != ELF [ 76.910660][ T4411] EXT4-fs error (device loop3): ext4_do_update_inode:5204: inode #16: comm syz.3.40: corrupted inode contents [ 76.977115][ T4443] netlink: 'syz.2.46': attribute type 4 has an invalid length. [ 77.046526][ T4411] EXT4-fs (loop3): Remounting filesystem read-only [ 77.060794][ T4257] usb 2-1: device descriptor read/64, error -71 [ 77.080683][ T4411] EXT4-fs error (device loop3): ext4_truncate:4273: inode #16: comm syz.3.40: mark_inode_dirty error [ 77.148764][ T4411] EXT4-fs (loop3): Remounting filesystem read-only [ 77.158012][ T4448] loop4: detected capacity change from 0 to 512 [ 77.162658][ T4411] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 77.232826][ T4411] EXT4-fs (loop3): Remounting filesystem read-only [ 77.240267][ T4411] EXT4-fs (loop3): 1 truncate cleaned up [ 77.261830][ T4411] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodioread_nolock,. Quota mode: writeback. [ 77.303686][ T4448] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 77.320049][ T4455] mmap: syz.0.51 (4455) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 77.332386][ T4448] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.340732][ T4257] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 77.544039][ T4257] usb 2-1: device descriptor read/64, error -71 [ 77.691792][ T4257] usb usb2-port1: attempt power cycle [ 77.938238][ T4472] netlink: 'syz.3.55': attribute type 12 has an invalid length. [ 78.074677][ T4485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.57'. [ 78.115605][ T4257] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 78.136657][ T4477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.57'. [ 78.171675][ T4483] netlink: 'syz.4.56': attribute type 10 has an invalid length. [ 78.212607][ T4257] usb 2-1: device descriptor read/8, error -71 [ 78.354634][ T4483] team0: Port device dummy0 added [ 78.387263][ T4491] netlink: 'syz.4.56': attribute type 10 has an invalid length. [ 78.480938][ T4257] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 78.587744][ T4491] team0: Port device dummy0 removed [ 78.593560][ T4257] usb 2-1: device descriptor read/8, error -71 [ 78.604272][ T4491] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 78.666012][ T4500] netlink: 'syz.3.61': attribute type 13 has an invalid length. [ 78.696361][ T4500] gretap0: refused to change device tx_queue_len [ 78.710883][ T4257] usb usb2-port1: unable to enumerate USB device [ 78.725438][ T4500] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 78.956373][ T4505] siw: device registration error -23 [ 79.601148][ T4516] netlink: 'syz.3.68': attribute type 12 has an invalid length. [ 79.728745][ T4524] syz.0.73[4524] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.728845][ T4524] syz.0.73[4524] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.761939][ T4524] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 79.820308][ T4528] IPv6: NLM_F_CREATE should be specified when creating new route [ 79.989199][ T4535] netlink: 12 bytes leftover after parsing attributes in process `syz.1.77'. [ 80.124411][ T4541] loop2: detected capacity change from 0 to 512 [ 80.262343][ T4184] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 80.275670][ T4541] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 80.346304][ T4555] loop4: detected capacity change from 0 to 512 [ 80.346403][ T4557] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 80.360039][ T4541] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.398326][ T4553] netlink: 'syz.1.84': attribute type 4 has an invalid length. [ 80.437346][ T21] lo speed is unknown, defaulting to 1000 [ 80.458169][ T4555] EXT4-fs (loop4): Unrecognized mount option "fowner<00000000000000000000" or missing value [ 81.052855][ T4573] loop3: detected capacity change from 0 to 1024 [ 81.125085][ T4573] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 81.136239][ T4573] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 81.165920][ T4573] JBD2: no valid journal superblock found [ 81.171859][ T4573] EXT4-fs (loop3): error loading journal [ 81.810976][ T4184] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 81.820077][ T4184] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.856253][ T4184] usb 1-1: Product: syz [ 81.860492][ T4184] usb 1-1: Manufacturer: syz [ 81.902677][ T4184] usb 1-1: SerialNumber: syz [ 82.019153][ T4184] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 82.212511][ T4583] loop3: detected capacity change from 0 to 8192 [ 82.509838][ T4591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.98'. [ 82.698815][ T4184] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 82.914098][ T4250] usb 1-1: USB disconnect, device number 2 [ 83.315247][ T13] cfg80211: failed to load regulatory.db [ 83.357798][ T4596] loop2: detected capacity change from 0 to 8192 [ 83.458939][ T4602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.102'. [ 83.495254][ T4602] bond0: Unable to set up delay as MII monitoring is disabled [ 83.529183][ T26] kauditd_printk_skb: 43 callbacks suppressed [ 83.529198][ T26] audit: type=1326 audit(1758318308.230:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4603 comm="syz.0.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e03a6c29 code=0x7ffc0000 [ 83.616724][ T26] audit: type=1326 audit(1758318308.230:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4603 comm="syz.0.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e03a6c29 code=0x7ffc0000 [ 83.642681][ T4606] device batadv_slave_1 entered promiscuous mode [ 83.683486][ T4606] device batadv_slave_1 left promiscuous mode [ 83.737090][ T4184] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 83.739246][ T26] audit: type=1326 audit(1758318308.270:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4603 comm="syz.0.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb6e03a6c29 code=0x7ffc0000 [ 83.750302][ T4184] ath9k_htc: Failed to initialize the device [ 83.852726][ T4250] usb 1-1: ath9k_htc: USB layer deinitialized [ 83.913536][ T26] audit: type=1326 audit(1758318308.270:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4603 comm="syz.0.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e03a6c29 code=0x7ffc0000 [ 84.027732][ T26] audit: type=1326 audit(1758318308.270:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4603 comm="syz.0.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e03a6c29 code=0x7ffc0000 [ 84.045255][ T4621] loop2: detected capacity change from 0 to 128 [ 84.082117][ T4622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.112'. [ 84.126878][ T26] audit: type=1326 audit(1758318308.270:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4603 comm="syz.0.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fb6e03a6c29 code=0x7ffc0000 [ 84.180744][ T26] audit: type=1326 audit(1758318308.270:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4603 comm="syz.0.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e03a6c29 code=0x7ffc0000 [ 84.280772][ T26] audit: type=1326 audit(1758318308.270:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4603 comm="syz.0.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e03a6c29 code=0x7ffc0000 [ 84.297747][ T4622] syz.0.112 (4622) used greatest stack depth: 16872 bytes left [ 84.338756][ T26] audit: type=1326 audit(1758318308.270:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4603 comm="syz.0.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7fb6e03a6c29 code=0x7ffc0000 [ 84.426248][ T4633] netlink: 'syz.0.117': attribute type 12 has an invalid length. [ 84.446626][ T26] audit: type=1326 audit(1758318308.270:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4603 comm="syz.0.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e03a6c29 code=0x7ffc0000 [ 84.577608][ T4636] loop4: detected capacity change from 0 to 128 [ 84.630743][ T4636] FAT-fs (loop4): bogus number of FAT structure [ 84.673546][ T4636] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 84.689009][ T4636] FAT-fs (loop4): Can't find a valid FAT filesystem [ 85.140039][ T4655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.128'. [ 85.201830][ T4661] netlink: 'syz.1.131': attribute type 12 has an invalid length. [ 85.524214][ T4675] netlink: 3 bytes leftover after parsing attributes in process `syz.3.137'. [ 85.577010][ T4675] device batadv1 entered promiscuous mode [ 85.670156][ T4680] netlink: 32 bytes leftover after parsing attributes in process `syz.0.139'. [ 85.912534][ T4687] capability: warning: `syz.2.143' uses 32-bit capabilities (legacy support in use) [ 85.957058][ T4691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.145'. [ 86.075625][ T4697] netlink: 'syz.3.146': attribute type 12 has an invalid length. [ 86.573681][ T4724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.160'. [ 86.721425][ T4726] loop2: detected capacity change from 0 to 512 [ 86.751486][ T4726] EXT4-fs (loop2): Ignoring removed oldalloc option [ 86.789565][ T4727] loop3: detected capacity change from 0 to 2048 [ 86.812167][ T4726] EXT4-fs (loop2): 1 truncate cleaned up [ 86.820028][ T4726] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 86.857631][ T4727] EXT4-fs (loop3): inline encryption not supported [ 86.912726][ T4727] EXT4-fs (loop3): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: none. [ 87.043852][ T4735] netlink: 'syz.1.163': attribute type 12 has an invalid length. [ 87.456612][ T4749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.169'. [ 87.480520][ T4749] netlink: 56 bytes leftover after parsing attributes in process `syz.2.169'. [ 87.633461][ T4755] netlink: 16 bytes leftover after parsing attributes in process `syz.0.173'. [ 87.708400][ T4753] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.869493][ T4753] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.911624][ T4762] netlink: 'syz.0.175': attribute type 12 has an invalid length. [ 88.006216][ T4753] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.119008][ T4753] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.330150][ T4753] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.377762][ T4753] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.442534][ T4753] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.472999][ T4753] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.612705][ T26] kauditd_printk_skb: 203 callbacks suppressed [ 88.612719][ T26] audit: type=1326 audit(1758318313.320:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4781 comm="syz.2.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e661f4c29 code=0x7ffc0000 [ 88.670862][ T4788] netlink: 'syz.1.187': attribute type 12 has an invalid length. [ 88.675567][ T26] audit: type=1326 audit(1758318313.320:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4781 comm="syz.2.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f8e661f4c29 code=0x7ffc0000 [ 88.797018][ T26] audit: type=1326 audit(1758318313.500:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4781 comm="syz.2.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e661f4c29 code=0x7ffc0000 [ 89.005913][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 89.769305][ T26] audit: type=1326 audit(1758318314.470:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4801 comm="syz.2.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8e661ebbe7 code=0x7ffc0000 [ 89.890820][ T26] audit: type=1326 audit(1758318314.510:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4801 comm="syz.2.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8e66190e09 code=0x7ffc0000 [ 89.937237][ T26] audit: type=1326 audit(1758318314.510:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4801 comm="syz.2.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8e661ebbe7 code=0x7ffc0000 [ 89.961275][ T26] audit: type=1326 audit(1758318314.510:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4801 comm="syz.2.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8e66190e09 code=0x7ffc0000 [ 90.008262][ T4814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.197'. [ 90.029970][ T26] audit: type=1326 audit(1758318314.510:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4801 comm="syz.2.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e661f4c29 code=0x7ffc0000 [ 90.067188][ T26] audit: type=1326 audit(1758318314.510:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4801 comm="syz.2.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e661f4c29 code=0x7ffc0000 [ 90.114716][ T26] audit: type=1326 audit(1758318314.510:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4801 comm="syz.2.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f8e661f4c29 code=0x7ffc0000 [ 90.211250][ T4825] netlink: 'syz.0.201': attribute type 12 has an invalid length. [ 90.289929][ T4827] [ 90.302907][ T4827] ============================= [ 90.307807][ T4827] WARNING: suspicious RCU usage [ 90.322674][ T4827] syzkaller #0 Not tainted [ 90.327965][ T4834] netlink: 14 bytes leftover after parsing attributes in process `syz.0.206'. [ 90.340494][ T4827] ----------------------------- [ 90.350433][ T4827] include/linux/rhashtable.h:594 suspicious rcu_dereference_check() usage! [ 90.369425][ T4827] [ 90.369425][ T4827] other info that might help us debug this: [ 90.369425][ T4827] [ 90.386209][ T4827] [ 90.386209][ T4827] rcu_scheduler_active = 2, debug_locks = 1 [ 90.402725][ T4827] 1 lock held by syz.1.203/4827: [ 90.411266][ T4827] #0: ffffffff8d238048 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x105/0x11a0 [ 90.425966][ T4827] [ 90.425966][ T4827] stack backtrace: [ 90.432211][ T4827] CPU: 0 PID: 4827 Comm: syz.1.203 Not tainted syzkaller #0 [ 90.439548][ T4827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 90.449773][ T4827] Call Trace: [ 90.453077][ T4827] [ 90.456037][ T4827] dump_stack_lvl+0x168/0x230 [ 90.460776][ T4827] ? load_image+0x3b0/0x3b0 [ 90.465339][ T4827] ? show_regs_print_info+0x20/0x20 [ 90.470935][ T4827] ? lockdep_rcu_suspicious+0x110/0x180 [ 90.476530][ T4827] ? local_bh_enable+0x20/0x20 [ 90.481467][ T4827] rhltable_lookup+0x77b/0x790 [ 90.486270][ T4827] ? mr_mfc_find_parent+0x190/0x190 [ 90.491489][ T4827] ? mark_lock+0x94/0x320 [ 90.495853][ T4827] ? local_bh_enable+0x20/0x20 [ 90.500645][ T4827] ? mark_lock+0x94/0x320 [ 90.505010][ T4827] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 90.511003][ T4827] ? lock_chain_count+0x20/0x20 [ 90.515860][ T4827] mr_mfc_find_any_parent+0xb6/0x1e0 [ 90.521297][ T4827] ? local_bh_enable+0x20/0x20 [ 90.526073][ T4827] ip_mr_forward+0x24c/0xf90 [ 90.530678][ T4827] ipmr_mfc_add+0x2466/0x2eb0 [ 90.535384][ T4827] ? ipmr_mfc_delete+0x5c0/0x5c0 [ 90.540325][ T4827] ? __lock_acquire+0x7c60/0x7c60 [ 90.545376][ T4827] ip_mroute_setsockopt+0xe33/0x11a0 [ 90.550710][ T4827] ? ipmr_rule_default+0x70/0x70 [ 90.555755][ T4827] ? __might_sleep+0xf0/0xf0 [ 90.560359][ T4827] ip_setsockopt+0x4ad/0x3070 [ 90.565060][ T4827] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 90.570440][ T4827] ? aa_sk_perm+0x7b4/0x8f0 [ 90.574958][ T4827] ? aa_af_perm+0x2b0/0x2b0 [ 90.579689][ T4827] ? __fget_files+0x40f/0x480 [ 90.584375][ T4827] ? aa_sock_opt_perm+0x74/0x100 [ 90.589317][ T4827] ? sock_common_setsockopt+0x32/0xb0 [ 90.594700][ T4827] ? raw_setsockopt+0xc5/0x180 [ 90.599486][ T4827] ? sock_common_recvmsg+0x1b0/0x1b0 [ 90.604794][ T4827] __sys_setsockopt+0x2bf/0x3d0 [ 90.609663][ T4827] __x64_sys_setsockopt+0xb1/0xc0 [ 90.614719][ T4827] do_syscall_64+0x4c/0xa0 [ 90.619134][ T4827] ? clear_bhb_loop+0x30/0x80 [ 90.623832][ T4827] ? clear_bhb_loop+0x30/0x80 [ 90.628519][ T4827] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 90.634533][ T4827] RIP: 0033:0x7f94d779bc29 [ 90.638948][ T4827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.641079][ T23] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 90.658560][ T4827] RSP: 002b:00007f94d5a03038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 90.658588][ T4827] RAX: ffffffffffffffda RBX: 00007f94d79e2fa0 RCX: 00007f94d779bc29 [ 90.658604][ T4827] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 000000000000000a [ 90.658617][ T4827] RBP: 00007f94d781ee41 R08: 000000000000003c R09: 0000000000000000 [ 90.658630][ T4827] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 90.658644][ T4827] R13: 00007f94d79e3038 R14: 00007f94d79e2fa0 R15: 00007fffaf5738b8 [ 90.674472][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.676093][ T4827] [ 90.695056][ T4827] [ 90.702401][ T23] usb 4-1: Product: syz [ 90.716173][ T4827] ============================= [ 90.718203][ T23] usb 4-1: Manufacturer: syz [ 90.727014][ T4827] WARNING: suspicious RCU usage [ 90.728354][ T23] usb 4-1: SerialNumber: syz [ 90.731252][ T4827] syzkaller #0 Not tainted [ 90.758922][ T4827] ----------------------------- [ 90.766442][ T4827] include/linux/rhashtable.h:369 suspicious rcu_dereference_check() usage! [ 90.775343][ T4827] [ 90.775343][ T4827] other info that might help us debug this: [ 90.775343][ T4827] [ 90.787692][ T4827] [ 90.787692][ T4827] rcu_scheduler_active = 2, debug_locks = 1 [ 90.795950][ T4827] 1 lock held by syz.1.203/4827: [ 90.802481][ T23] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 90.809112][ T4827] #0: ffffffff8d238048 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x105/0x11a0 [ 90.821259][ T4827] [ 90.821259][ T4827] stack backtrace: [ 90.827317][ T4827] CPU: 0 PID: 4827 Comm: syz.1.203 Not tainted syzkaller #0 [ 90.834641][ T4827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 90.844880][ T4827] Call Trace: [ 90.848179][ T4827] [ 90.851125][ T4827] dump_stack_lvl+0x168/0x230 [ 90.855807][ T4827] ? load_image+0x3b0/0x3b0 [ 90.860315][ T4827] ? show_regs_print_info+0x20/0x20 [ 90.865519][ T4827] ? lockdep_rcu_suspicious+0x110/0x180 [ 90.871072][ T4827] ? local_bh_enable+0x20/0x20 [ 90.875839][ T4827] rhltable_lookup+0x504/0x790 [ 90.880616][ T4827] ? local_bh_enable+0x20/0x20 [ 90.885412][ T4827] ? mr_mfc_find_parent+0x190/0x190 [ 90.890632][ T4827] ? mark_lock+0x94/0x320 [ 90.894996][ T4827] ? local_bh_enable+0x20/0x20 [ 90.899760][ T4827] ? mark_lock+0x94/0x320 [ 90.904089][ T4827] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 90.910078][ T4827] ? lock_chain_count+0x20/0x20 [ 90.914952][ T4827] mr_mfc_find_any_parent+0xb6/0x1e0 [ 90.920238][ T4827] ? local_bh_enable+0x20/0x20 [ 90.925000][ T4827] ip_mr_forward+0x24c/0xf90 [ 90.929591][ T4827] ipmr_mfc_add+0x2466/0x2eb0 [ 90.934282][ T4827] ? ipmr_mfc_delete+0x5c0/0x5c0 [ 90.939234][ T4827] ? __lock_acquire+0x7c60/0x7c60 [ 90.944274][ T4827] ip_mroute_setsockopt+0xe33/0x11a0 [ 90.949584][ T4827] ? ipmr_rule_default+0x70/0x70 [ 90.954527][ T4827] ? __might_sleep+0xf0/0xf0 [ 90.959114][ T4827] ip_setsockopt+0x4ad/0x3070 [ 90.963789][ T4827] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 90.969175][ T4827] ? aa_sk_perm+0x7b4/0x8f0 [ 90.973687][ T4827] ? aa_af_perm+0x2b0/0x2b0 [ 90.978184][ T4827] ? __fget_files+0x40f/0x480 [ 90.982865][ T4827] ? aa_sock_opt_perm+0x74/0x100 [ 90.987821][ T4827] ? sock_common_setsockopt+0x32/0xb0 [ 90.993191][ T4827] ? raw_setsockopt+0xc5/0x180 [ 90.997949][ T4827] ? sock_common_recvmsg+0x1b0/0x1b0 [ 91.003232][ T4827] __sys_setsockopt+0x2bf/0x3d0 [ 91.008087][ T4827] __x64_sys_setsockopt+0xb1/0xc0 [ 91.013112][ T4827] do_syscall_64+0x4c/0xa0 [ 91.017525][ T4827] ? clear_bhb_loop+0x30/0x80 [ 91.022195][ T4827] ? clear_bhb_loop+0x30/0x80 [ 91.026864][ T4827] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.032760][ T4827] RIP: 0033:0x7f94d779bc29 [ 91.037205][ T4827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.056826][ T4827] RSP: 002b:00007f94d5a03038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 91.065272][ T4827] RAX: ffffffffffffffda RBX: 00007f94d79e2fa0 RCX: 00007f94d779bc29 [ 91.073239][ T4827] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 000000000000000a [ 91.081209][ T4827] RBP: 00007f94d781ee41 R08: 000000000000003c R09: 0000000000000000 [ 91.089193][ T4827] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 91.097160][ T4827] R13: 00007f94d79e3038 R14: 00007f94d79e2fa0 R15: 00007fffaf5738b8 [ 91.105140][ T4827] [ 91.122082][ T4827] [ 91.124557][ T4827] ============================= [ 91.129510][ T4827] WARNING: suspicious RCU usage [ 91.134814][ T4827] syzkaller #0 Not tainted [ 91.139413][ T4827] ----------------------------- [ 91.144687][ T4827] include/linux/rhashtable.h:614 suspicious rcu_dereference_check() usage! [ 91.153653][ T4827] [ 91.153653][ T4827] other info that might help us debug this: [ 91.153653][ T4827] [ 91.164401][ T4827] [ 91.164401][ T4827] rcu_scheduler_active = 2, debug_locks = 1 [ 91.172759][ T4827] 1 lock held by syz.1.203/4827: [ 91.177755][ T4827] #0: ffffffff8d238048 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x105/0x11a0 [ 91.188611][ T4827] [ 91.188611][ T4827] stack backtrace: [ 91.194995][ T4827] CPU: 1 PID: 4827 Comm: syz.1.203 Not tainted syzkaller #0 [ 91.202304][ T4827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 91.212473][ T4827] Call Trace: [ 91.215770][ T4827] [ 91.218717][ T4827] dump_stack_lvl+0x168/0x230 [ 91.223404][ T4827] ? load_image+0x3b0/0x3b0 [ 91.227926][ T4827] ? show_regs_print_info+0x20/0x20 [ 91.233206][ T4827] ? lockdep_rcu_suspicious+0x110/0x180 [ 91.238784][ T4827] ? local_bh_enable+0x20/0x20 [ 91.243661][ T4827] rhltable_lookup+0x5f8/0x790 [ 91.248433][ T4827] ? local_bh_enable+0x20/0x20 [ 91.253293][ T4827] ? mr_mfc_find_parent+0x190/0x190 [ 91.258651][ T4827] ? mark_lock+0x94/0x320 [ 91.262993][ T4827] ? local_bh_enable+0x20/0x20 [ 91.267766][ T4827] ? mark_lock+0x94/0x320 [ 91.272105][ T4827] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 91.278147][ T4827] ? lock_chain_count+0x20/0x20 [ 91.283004][ T4827] mr_mfc_find_any_parent+0xb6/0x1e0 [ 91.288295][ T4827] ? local_bh_enable+0x20/0x20 [ 91.293067][ T4827] ip_mr_forward+0x24c/0xf90 [ 91.297713][ T4827] ipmr_mfc_add+0x2466/0x2eb0 [ 91.302401][ T4827] ? ipmr_mfc_delete+0x5c0/0x5c0 [ 91.307340][ T4827] ? __lock_acquire+0x7c60/0x7c60 [ 91.312389][ T4827] ip_mroute_setsockopt+0xe33/0x11a0 [ 91.317703][ T4827] ? ipmr_rule_default+0x70/0x70 [ 91.322654][ T4827] ? __might_sleep+0xf0/0xf0 [ 91.327279][ T4827] ip_setsockopt+0x4ad/0x3070 [ 91.331976][ T4827] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 91.337371][ T4827] ? aa_sk_perm+0x7b4/0x8f0 [ 91.341914][ T4827] ? aa_af_perm+0x2b0/0x2b0 [ 91.346447][ T4827] ? __fget_files+0x40f/0x480 [ 91.351135][ T4827] ? aa_sock_opt_perm+0x74/0x100 [ 91.356118][ T4827] ? sock_common_setsockopt+0x32/0xb0 [ 91.361501][ T4827] ? raw_setsockopt+0xc5/0x180 [ 91.366287][ T4827] ? sock_common_recvmsg+0x1b0/0x1b0 [ 91.371578][ T4827] __sys_setsockopt+0x2bf/0x3d0 [ 91.376450][ T4827] __x64_sys_setsockopt+0xb1/0xc0 [ 91.381487][ T4827] do_syscall_64+0x4c/0xa0 [ 91.385921][ T4827] ? clear_bhb_loop+0x30/0x80 [ 91.390607][ T4827] ? clear_bhb_loop+0x30/0x80 [ 91.395307][ T4827] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.401225][ T4827] RIP: 0033:0x7f94d779bc29 [ 91.405656][ T4827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.425274][ T4827] RSP: 002b:00007f94d5a03038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 91.433703][ T4827] RAX: ffffffffffffffda RBX: 00007f94d79e2fa0 RCX: 00007f94d779bc29 [ 91.441707][ T4827] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 000000000000000a [ 91.449696][ T4827] RBP: 00007f94d781ee41 R08: 000000000000003c R09: 0000000000000000 [ 91.457672][ T4827] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 91.465647][ T4827] R13: 00007f94d79e3038 R14: 00007f94d79e2fa0 R15: 00007fffaf5738b8 [ 91.473744][ T4827] [ 91.707190][ T1108] usb 4-1: USB disconnect, device number 2 [ 91.720781][ T23] usb 4-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 91.731647][ T1108] usb 4-1: ath9k_htc: USB layer deinitialized