last executing test programs: 4.219772727s ago: executing program 0 (id=248): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 3.411885188s ago: executing program 0 (id=259): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r1}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x3}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x40044) 2.921809071s ago: executing program 0 (id=265): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1018000, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16=0x0, @ANYRESOCT, @ANYRES32, @ANYRESDEC], 0x1, 0x2ee, &(0x7f00000006c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) fdatasync(r0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x20000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 2.876883543s ago: executing program 1 (id=266): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xd, 0x200cc, 0x6, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0x4b2, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x2, r1}, 0x38) 2.8500715s ago: executing program 3 (id=267): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, 0x0, 0x40000) 2.589833013s ago: executing program 3 (id=270): r0 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x21e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) 2.512960207s ago: executing program 1 (id=271): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.428085623s ago: executing program 4 (id=272): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@func={0x5, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x5f, 0x5f, 0x5f, 0x30, 0x2e, 0x30]}}, 0x0, 0x2c, 0x0, 0x1, 0xe3, 0x0, @void, @value}, 0x28) 2.233318957s ago: executing program 1 (id=274): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) cachestat(r0, &(0x7f0000000000)={0xffffffffffffff81, 0x2}, &(0x7f0000000040), 0x0) 2.167782561s ago: executing program 4 (id=275): clock_gettime(0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000d80)={{0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES64], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000280)='./bus\x00', 0x280008a, &(0x7f0000000bc0)=ANY=[@ANYBLOB="73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e01352c726f6469722c696f636861727365743d64656661756c742c756e695f586c618502d333e9e635b3756d74c4eee52b13dbf0473f04a9d9e18b61696c3d312c757466383d302c666c7573682c726f6469722c73686f72746e616d653d77696839352c73686f72746e616d653d77696e6e742c73686f72746e616d653d77696e39352c73686f77657865632c756e695f786c6174653d302c757466383d302c757466383d302c756e695f786c6174653d302c73686f", @ANYRES8], 0x97, 0x2ad, &(0x7f00000007c0)="$eJzs3b9rO2UYAPDn0jQJOiSCkwge6OD05dvv6pIiLRQzKRnUQYttQZogtFDwB8ZOri6Ori6C4OY/4eJ/ILgKbhYsnNzlrklqGpPatP74fJa+fe953nve69uWDvf03eeHxwdpHJ1/8lO0WknUutGNiyQ6UYvKZzGj+0UAAP9mF1kWv2Zjq+QlEdFaX1kAwBqt/Pv/u7WXBACs2RtvvvXadq+383qatmJ3+PlZP//LPv84vr59FO/HIA7jcbTjMiK7Mh7vZlk2qqe5Trw0HJ3188zhOz+U62//ElHkb0U7OsXUbP5eb2crHZvKH+V1PFXev5vnP4l2PDvn/nu9nSdz8qPfiJdfnKr/UbTjx/figxjEQVHEOD9qEZ9upemr2Ze/ffx2Xl6en4zO+s0ibiLbuOcvDQAAAAAAAAAAAAAAAAAAAAAA/2GPyt45zSj69+RTZf+djcv8k81IK53Z/jzj/KRa6Fp/oFEWX1X9eR6naZqVgZP8ejxXj/rD7BoAAAAAAAAAAAAAAAAAAAD+WU4//Oh4fzA4PLmTQdUNoHqt/7brdKdmXojFwc3JvWrlcMHKsVHFJBELy8g3sXTNv5dtD2736J65qeZvvl16na//eu/lYHOJmL85qE7X8X4y/xk2o5ppVYfk++mYRix5r8ZNl7KVjl9j7qX2yntvPF0MRgtiIllU2Cs/j59cOZNc30WjeKpz0zfLwVT6bExr+fOcf6f8SXLVrSO52x9CAAAAAAAAAAAAAAAAAABAYfLS75yL5wtTa1lzbWUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwL2a/P//FQajMnmJ4EacnD7wFgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgf+CMAAP//SfdjDw==") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x200) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000001000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) set_mempolicy(0x4005, &(0x7f0000000080)=0x3, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x200000a, 0x4c831, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) flock(0xffffffffffffffff, 0x5) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f00000009c0)={{0x0, 0x3938700}, {0x77359400}}, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000cc0)='ip6_vti0\x00') setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000400)=@security={'security\x00', 0xe, 0x4, 0x2e8, 0xffffffff, 0x248, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2f8, 0x2f8, 0x2f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x1, 0x2, 0x0, 0x7, 0x2], 0x1, 0x4}, {0x1, [0x2, 0x2, 0x6, 0x1, 0x2, 0x3], 0x0, 0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0xff, 0x0}, @dev={0xac, 0x14, 0x14, 0x1d}, 0xff, 0x0, 'veth1_virt_wifi\x00', 'geneve1\x00', {}, {}, 0x2e, 0x1, 0x81}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x204, [0x6, 0x1, 0x4, 0x3, 0x6, 0x3], 0x0, 0x2}, {0x0, [0x2, 0x0, 0x4, 0x2, 0x2, 0x1], 0x6, 0x7}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1, 0x3, "d401000000268f9bb05931ed0babbd4a72079c682fd9cb9bbd15f04e1be8"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) fspick(0xffffffffffffff9c, &(0x7f0000000d00)='./file0\x00', 0x0) 2.081041188s ago: executing program 2 (id=277): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 1.980782158s ago: executing program 1 (id=278): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0, 0x0, 0xfffffffff7ffffe9}, 0x18) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000c7aa00859d37040e1a8bd30000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000010651fbe347b2c2b00000c00018008000100", @ANYRES8=r3], 0x20}}, 0x0) 1.847906583s ago: executing program 2 (id=279): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) 1.662652893s ago: executing program 1 (id=280): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x582, &(0x7f0000009ec0)="$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") syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000200)={[{@check_strict}, {@utf8}, {@uid}, {@map_off}, {@nocompress}, {@check_strict}, {@check_relaxed}, {@cruft}, {@nojoliet}, {@sbsector={'sbsector', 0x3d, 0x60000000}}, {@nocompress}, {@mode={'mode', 0x3d, 0xfe8}}, {@uid}, {@dmode={'dmode', 0x3d, 0x7}}]}, 0x3f, 0x58a, &(0x7f0000000cc0)="$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") 1.584039655s ago: executing program 5 (id=281): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fbb, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.499226642s ago: executing program 3 (id=282): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, 0x0, 0x40000) 1.481373814s ago: executing program 2 (id=283): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setreuid(0x0, 0xee01) 1.39129516s ago: executing program 4 (id=284): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x0) 1.265479885s ago: executing program 5 (id=285): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x121000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x4, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000002240)=@gcm_256={{0x303}, "d0baa78683365c21", "90f2142e57f2f9752576d07d748df62221e924e7b42ecaea34669533a35ab169", "7aebc923", "14b6429e3a851d78"}, 0x38) write$binfmt_aout(r1, 0x0, 0xfdef) sendto$inet6(r1, &(0x7f00000000c0)="c6", 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 1.198180972s ago: executing program 5 (id=286): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.119934764s ago: executing program 2 (id=287): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x198) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 1.119524227s ago: executing program 3 (id=288): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000004940)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.011720956s ago: executing program 4 (id=289): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'dummy0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd6000000000002d9300000c0001", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) 943.787405ms ago: executing program 0 (id=290): r0 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x21e}, 0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r1, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r2, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) sendmmsg(r3, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000a40)="cd", 0x1}], 0x1}}], 0x1, 0x40) 810.795082ms ago: executing program 5 (id=291): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffa}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x9135}, 0x18) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) lsm_get_self_attr(0x67, &(0x7f0000000580)={0x0, 0x0, 0xad, 0x8d, ""/141}, &(0x7f0000000080)=0xfffffffffffffe9c, 0x0) 723.539236ms ago: executing program 4 (id=292): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0, 0x0, 0xfffffffff7ffffe9}, 0x18) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000c7aa00859d37040e1a8bd30000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000010651fbe347b2c2b00000c00018008000100", @ANYRES8=r3], 0x20}}, 0x0) 652.027783ms ago: executing program 3 (id=293): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) 564.100915ms ago: executing program 2 (id=294): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) 495.76214ms ago: executing program 0 (id=295): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) 467.357955ms ago: executing program 5 (id=296): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="18020000002000000000000000000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2}, 0x14) syz_emit_ethernet(0x0, 0x0, 0x0) 365.168558ms ago: executing program 4 (id=297): ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000180)={0x80, 0x2d, 0x3, 0x0, 0x0, 0x2}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000006000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='mm_page_alloc\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x40047451, &(0x7f0000000180)) 267.82979ms ago: executing program 1 (id=298): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1054, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x5, 0x0, 0x0, 0x5, 0x0, "ef359f413bb901527f00d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea0000000000000000000800002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) 143.916964ms ago: executing program 0 (id=299): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18) openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x4280) 114.617289ms ago: executing program 2 (id=300): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 81.872029ms ago: executing program 3 (id=301): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4e, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x7, 0x2, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) 0s ago: executing program 5 (id=302): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.28' (ED25519) to the list of known hosts. [ 83.709307][ T5811] cgroup: Unknown subsys name 'net' [ 83.833677][ T5811] cgroup: Unknown subsys name 'cpuset' [ 83.842894][ T5811] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.398343][ T5811] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.892868][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.908218][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.919990][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.927799][ T5849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 89.935149][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.942820][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.969469][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.986408][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.987791][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.993673][ T5850] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 90.001023][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.008663][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.015076][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.021512][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.028724][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.035667][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.043881][ T5849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 90.057086][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.057643][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.065357][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.073023][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.078619][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.085302][ T5849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 90.092867][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.100277][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.106548][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.113855][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.126793][ T5848] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 90.131258][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.149831][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.994122][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 91.071234][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 91.151013][ T969] cfg80211: failed to load regulatory.db [ 91.163638][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 91.232392][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 91.376405][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 91.429370][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.436782][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.444507][ T5835] bridge_slave_0: entered allmulticast mode [ 91.452914][ T5835] bridge_slave_0: entered promiscuous mode [ 91.466482][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.474189][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.481883][ T5835] bridge_slave_1: entered allmulticast mode [ 91.489205][ T5835] bridge_slave_1: entered promiscuous mode [ 91.543808][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 91.585494][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.592726][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.599924][ T5838] bridge_slave_0: entered allmulticast mode [ 91.607264][ T5838] bridge_slave_0: entered promiscuous mode [ 91.615399][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.622578][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.629763][ T5838] bridge_slave_1: entered allmulticast mode [ 91.637605][ T5838] bridge_slave_1: entered promiscuous mode [ 91.677111][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.748724][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.857031][ T5835] team0: Port device team_slave_0 added [ 91.863312][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.871030][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.878152][ T5834] bridge_slave_0: entered allmulticast mode [ 91.885671][ T5834] bridge_slave_0: entered promiscuous mode [ 91.905251][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.918527][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.949117][ T5835] team0: Port device team_slave_1 added [ 91.955692][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.963436][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.971319][ T5834] bridge_slave_1: entered allmulticast mode [ 91.978652][ T5834] bridge_slave_1: entered promiscuous mode [ 92.005880][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.013223][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.020702][ T5830] bridge_slave_0: entered allmulticast mode [ 92.028025][ T5830] bridge_slave_0: entered promiscuous mode [ 92.104571][ T5838] team0: Port device team_slave_0 added [ 92.111255][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.118428][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.125875][ T5830] bridge_slave_1: entered allmulticast mode [ 92.133962][ T5830] bridge_slave_1: entered promiscuous mode [ 92.205937][ T5852] Bluetooth: hci1: command tx timeout [ 92.205943][ T5851] Bluetooth: hci2: command tx timeout [ 92.206118][ T5851] Bluetooth: hci3: command tx timeout [ 92.213212][ T5848] Bluetooth: hci0: command tx timeout [ 92.231317][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.238428][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.245803][ T5837] bridge_slave_0: entered allmulticast mode [ 92.253598][ T5837] bridge_slave_0: entered promiscuous mode [ 92.264110][ T5838] team0: Port device team_slave_1 added [ 92.269906][ T5848] Bluetooth: hci5: command tx timeout [ 92.279561][ T5848] Bluetooth: hci4: command tx timeout [ 92.318455][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.343398][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.351518][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.377678][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.392639][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.402356][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.409650][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.416777][ T5837] bridge_slave_1: entered allmulticast mode [ 92.424901][ T5837] bridge_slave_1: entered promiscuous mode [ 92.432379][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.439774][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.465708][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.479467][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.502155][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.509098][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.535132][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.557771][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.581596][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.588531][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.615080][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.656011][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.663723][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.671126][ T5829] bridge_slave_0: entered allmulticast mode [ 92.678525][ T5829] bridge_slave_0: entered promiscuous mode [ 92.687893][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.695106][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.702693][ T5829] bridge_slave_1: entered allmulticast mode [ 92.710961][ T5829] bridge_slave_1: entered promiscuous mode [ 92.764260][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.802530][ T5830] team0: Port device team_slave_0 added [ 92.811630][ T5830] team0: Port device team_slave_1 added [ 92.835281][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.861689][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.908493][ T5838] hsr_slave_0: entered promiscuous mode [ 92.915503][ T5838] hsr_slave_1: entered promiscuous mode [ 92.968839][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.981415][ T5834] team0: Port device team_slave_0 added [ 93.003952][ T5837] team0: Port device team_slave_0 added [ 93.051511][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.058451][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.084678][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.112171][ T5834] team0: Port device team_slave_1 added [ 93.120515][ T5837] team0: Port device team_slave_1 added [ 93.153806][ T5835] hsr_slave_0: entered promiscuous mode [ 93.160545][ T5835] hsr_slave_1: entered promiscuous mode [ 93.166675][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.174764][ T5835] Cannot create hsr debugfs directory [ 93.198440][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.205499][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.233779][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.291476][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.298419][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.324428][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.376365][ T5829] team0: Port device team_slave_0 added [ 93.397948][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.405055][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.431212][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.489083][ T5829] team0: Port device team_slave_1 added [ 93.512619][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.519667][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.546348][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.607428][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.614906][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.641351][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.697865][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.705071][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.731079][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.751173][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.758103][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.784600][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.828823][ T5830] hsr_slave_0: entered promiscuous mode [ 93.835768][ T5830] hsr_slave_1: entered promiscuous mode [ 93.842177][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.849858][ T5830] Cannot create hsr debugfs directory [ 93.886391][ T5837] hsr_slave_0: entered promiscuous mode [ 93.893461][ T5837] hsr_slave_1: entered promiscuous mode [ 93.899954][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.907499][ T5837] Cannot create hsr debugfs directory [ 94.018314][ T5834] hsr_slave_0: entered promiscuous mode [ 94.024969][ T5834] hsr_slave_1: entered promiscuous mode [ 94.031409][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.038961][ T5834] Cannot create hsr debugfs directory [ 94.202677][ T5829] hsr_slave_0: entered promiscuous mode [ 94.209704][ T5829] hsr_slave_1: entered promiscuous mode [ 94.215847][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.223692][ T5829] Cannot create hsr debugfs directory [ 94.275043][ T5851] Bluetooth: hci0: command tx timeout [ 94.275072][ T5839] Bluetooth: hci2: command tx timeout [ 94.280557][ T5848] Bluetooth: hci3: command tx timeout [ 94.285961][ T5852] Bluetooth: hci1: command tx timeout [ 94.349538][ T5852] Bluetooth: hci4: command tx timeout [ 94.349546][ T5848] Bluetooth: hci5: command tx timeout [ 94.620878][ T5838] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.656163][ T5838] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.681901][ T5838] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.712576][ T5838] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.784943][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.797487][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.808544][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.822504][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.927991][ T5830] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 94.944510][ T5830] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 94.956457][ T5830] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 94.967862][ T5830] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 95.073705][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.104521][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.116411][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.154567][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.216351][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.245263][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.258367][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.282759][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.326817][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.335035][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.417710][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.454063][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.466568][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.483826][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.508340][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.515871][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.527693][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.565076][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.572288][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.584104][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.591230][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.601542][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.608633][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.675903][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.688130][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.695293][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.743018][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.750179][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.783378][ T5835] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 95.794184][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.826487][ T994] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.833602][ T994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.861430][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.966345][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.039110][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.085566][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.128836][ T994] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.136002][ T994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.168988][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.176128][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.217933][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.225091][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.278033][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.285174][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.349718][ T5852] Bluetooth: hci3: command tx timeout [ 96.355137][ T5852] Bluetooth: hci0: command tx timeout [ 96.355694][ T5848] Bluetooth: hci1: command tx timeout [ 96.361824][ T5839] Bluetooth: hci2: command tx timeout [ 96.384388][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.404081][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.431353][ T5852] Bluetooth: hci5: command tx timeout [ 96.436761][ T5852] Bluetooth: hci4: command tx timeout [ 96.507282][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.566566][ T5837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.591955][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.599093][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.626884][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.634029][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.685227][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.742788][ T5835] veth0_vlan: entered promiscuous mode [ 96.768954][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.821544][ T5835] veth1_vlan: entered promiscuous mode [ 97.014420][ T5835] veth0_macvtap: entered promiscuous mode [ 97.051185][ T5835] veth1_macvtap: entered promiscuous mode [ 97.170075][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.240376][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.304531][ T5835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.345697][ T5835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.359351][ T5835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.390117][ T5835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.505412][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.597791][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.708517][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.764532][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.783750][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.872306][ T5838] veth0_vlan: entered promiscuous mode [ 97.884085][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.900088][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.910083][ T5829] veth0_vlan: entered promiscuous mode [ 97.938045][ T5829] veth1_vlan: entered promiscuous mode [ 97.964835][ T5837] veth0_vlan: entered promiscuous mode [ 98.001886][ T5834] veth0_vlan: entered promiscuous mode [ 98.014489][ T5830] veth0_vlan: entered promiscuous mode [ 98.027342][ T5837] veth1_vlan: entered promiscuous mode [ 98.034176][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.036634][ T5838] veth1_vlan: entered promiscuous mode [ 98.065271][ T5830] veth1_vlan: entered promiscuous mode [ 98.140801][ T5834] veth1_vlan: entered promiscuous mode [ 98.158455][ T5829] veth0_macvtap: entered promiscuous mode [ 98.175380][ T5937] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.217699][ T5834] veth0_macvtap: entered promiscuous mode [ 98.231234][ T5838] veth0_macvtap: entered promiscuous mode [ 98.282670][ T5829] veth1_macvtap: entered promiscuous mode [ 98.310789][ T5838] veth1_macvtap: entered promiscuous mode [ 98.325547][ T5830] veth0_macvtap: entered promiscuous mode [ 98.355873][ T5834] veth1_macvtap: entered promiscuous mode [ 98.377810][ T5837] veth0_macvtap: entered promiscuous mode [ 98.413820][ T5830] veth1_macvtap: entered promiscuous mode [ 98.428145][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.440849][ T5839] Bluetooth: hci2: command tx timeout [ 98.444845][ T5848] Bluetooth: hci1: command tx timeout [ 98.446236][ T5839] Bluetooth: hci3: command tx timeout [ 98.457055][ T5852] Bluetooth: hci0: command tx timeout [ 98.463609][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.475990][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.489208][ T5837] veth1_macvtap: entered promiscuous mode [ 98.502931][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.509745][ T5852] Bluetooth: hci4: command tx timeout [ 98.518735][ T5852] Bluetooth: hci5: command tx timeout [ 98.524504][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.536136][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.547202][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.560018][ T5944] netlink: 'syz.0.8': attribute type 1 has an invalid length. [ 98.569198][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.593434][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.607350][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.619193][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.635069][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.646217][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.657811][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.669139][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.684105][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.695590][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.707511][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.729004][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.744713][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.756276][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.769455][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.782907][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.835875][ T5834] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.845588][ T5834] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.855120][ T5834] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.864568][ T5834] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.894117][ T5948] vlan2: entered allmulticast mode [ 98.899435][ T5948] bond0: entered allmulticast mode [ 98.904549][ T5948] bond_slave_0: entered allmulticast mode [ 98.912793][ T5948] bond_slave_1: entered allmulticast mode [ 98.936696][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.947378][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.957369][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.967822][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.977875][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.989103][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.003259][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.025300][ T5829] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.034648][ T5829] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.044376][ T5829] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.054484][ T5829] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.074748][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.094624][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.104853][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.115857][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.125750][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.136657][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.148921][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.160488][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.172157][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.184129][ T5950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10'. [ 99.184568][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.194208][ T5950] openvswitch: netlink: Flow key attr not present in new flow. [ 99.212119][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.212141][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.212161][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.212176][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.212194][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.212207][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.212224][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.212237][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.212254][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.213918][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.319780][ T5838] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.328490][ T5838] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.338598][ T5838] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.358823][ T5838] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.373369][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.385369][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.396052][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.414890][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.427145][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.444082][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.455307][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.481592][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.506898][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.324052][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.349157][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.363884][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.387145][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.408893][ T5956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13'. [ 100.410138][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.430860][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.440732][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.451201][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.461073][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.471538][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.482949][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.495387][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.505034][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.517386][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.526595][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.555044][ T5830] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.563942][ T5830] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.573545][ T5830] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.582810][ T5830] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.677652][ T5956] syz.0.13 (5956) used greatest stack depth: 16200 bytes left [ 100.814623][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.827014][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.866958][ T5914] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.888773][ T5914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.032190][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.052268][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.112701][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.136754][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.194805][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.215658][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.296900][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.316149][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.418337][ T5968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 101.442806][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.450736][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.481860][ T5968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 101.539034][ T5922] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.580111][ T5922] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.689128][ T5914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.697782][ T5914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.721654][ T994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.779450][ T994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.495124][ T5988] syz.3.22 uses obsolete (PF_INET,SOCK_PACKET) [ 103.555238][ T5989] loop2: detected capacity change from 0 to 128 [ 103.662314][ T5989] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 103.865258][ T5989] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 104.400400][ T6003] loop4: detected capacity change from 0 to 512 [ 104.473482][ T6003] ======================================================= [ 104.473482][ T6003] WARNING: The mand mount option has been deprecated and [ 104.473482][ T6003] and is ignored by this kernel. Remove the mand [ 104.473482][ T6003] option from the mount to silence this warning. [ 104.473482][ T6003] ======================================================= [ 104.695105][ T6003] EXT4-fs (loop4): orphan cleanup on readonly fs [ 104.796835][ T6003] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.24: bg 0: block 248: padding at end of block bitmap is not set [ 104.813818][ T6003] Quota error (device loop4): write_blk: dquota write failed [ 104.826682][ T6003] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 104.928880][ T6003] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.24: Failed to acquire dquot type 1 [ 104.993170][ T6003] EXT4-fs (loop4): 1 truncate cleaned up [ 105.030192][ T6003] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 105.048139][ T6016] gre1: entered allmulticast mode [ 105.116877][ T6003] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 105.174844][ T6003] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 105.441461][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.715193][ T2143] kernel write not supported for file /16/attr/exec (pid: 2143 comm: kworker/1:2) [ 106.672573][ T5892] kernel write not supported for file /19/attr/exec (pid: 5892 comm: kworker/1:4) [ 106.737707][ T5892] kernel write not supported for file /41/sched (pid: 5892 comm: kworker/1:4) [ 107.046112][ T6083] process 'syz.1.57' launched './file0' with NULL argv: empty string added [ 107.386499][ T6095] dummy0: entered allmulticast mode [ 107.411431][ T30] audit: type=1326 audit(1746916237.339:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6097 comm="syz.2.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73c78e969 code=0x7ffc0000 [ 107.493399][ T30] audit: type=1326 audit(1746916237.339:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6097 comm="syz.2.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7fa73c78e969 code=0x7ffc0000 [ 107.601802][ T30] audit: type=1326 audit(1746916237.339:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6097 comm="syz.2.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73c78e969 code=0x7ffc0000 [ 107.676244][ T30] audit: type=1326 audit(1746916237.419:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6097 comm="syz.2.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73c78e969 code=0x7ffc0000 [ 107.741331][ T6102] loop4: detected capacity change from 0 to 512 [ 107.780390][ T6102] EXT4-fs: Ignoring removed nobh option [ 107.879809][ T6102] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.65: invalid indirect mapped block 256 (level 2) [ 107.939004][ T5892] kernel write not supported for file /19/attr/exec (pid: 5892 comm: kworker/1:4) [ 107.958212][ T6102] EXT4-fs (loop4): 2 truncates cleaned up [ 108.013263][ T6102] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.048119][ T6102] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.65: bg 0: block 5: invalid block bitmap [ 108.231770][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.270982][ T6120] loop2: detected capacity change from 0 to 512 [ 108.477773][ T6120] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.570093][ T6120] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.591772][ T6128] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 108.847392][ T5837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.987019][ T30] audit: type=1326 audit(1746916238.909:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.3.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541bd8e969 code=0x7ffc0000 [ 109.084922][ T30] audit: type=1326 audit(1746916238.949:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.3.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541bd8e969 code=0x7ffc0000 [ 109.169338][ T30] audit: type=1326 audit(1746916238.959:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.3.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f541bd8e969 code=0x7ffc0000 [ 109.310385][ T30] audit: type=1326 audit(1746916238.959:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.3.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541bd8e969 code=0x7ffc0000 [ 109.405155][ T5892] kernel write not supported for file /32/attr/exec (pid: 5892 comm: kworker/1:4) [ 109.470916][ T6152] capability: warning: `syz.2.84' uses deprecated v2 capabilities in a way that may be insecure [ 109.666041][ T6155] loop4: detected capacity change from 0 to 512 [ 109.748155][ T6155] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.812919][ T6155] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.851643][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 109.851660][ T30] audit: type=1326 audit(1746916239.779:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6158 comm="syz.3.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f541bd8e969 code=0x7ffc0000 [ 110.037764][ T30] audit: type=1326 audit(1746916239.779:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6158 comm="syz.3.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541bd8e969 code=0x7ffc0000 [ 110.139389][ T30] audit: type=1326 audit(1746916239.779:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6158 comm="syz.3.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f541bd8e969 code=0x7ffc0000 [ 110.167167][ T30] audit: type=1326 audit(1746916239.779:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6158 comm="syz.3.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541bd8e969 code=0x7ffc0000 [ 110.211457][ T30] audit: type=1326 audit(1746916239.819:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6158 comm="syz.3.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f541bd8e969 code=0x7ffc0000 [ 110.236667][ T30] audit: type=1326 audit(1746916239.819:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6158 comm="syz.3.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541bd8e969 code=0x7ffc0000 [ 110.266633][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.277107][ T30] audit: type=1326 audit(1746916239.839:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6158 comm="syz.3.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541bd8e969 code=0x7ffc0000 [ 111.281846][ T6199] loop4: detected capacity change from 0 to 512 [ 111.377176][ T6199] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.495878][ T6199] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.660448][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.764217][ T6183] loop3: detected capacity change from 0 to 32768 [ 111.839558][ T6183] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.97 (6183) [ 111.928552][ T6183] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 111.967803][ T6213] loop5: detected capacity change from 0 to 764 [ 112.007147][ T6183] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 112.044530][ T6183] BTRFS info (device loop3): disk space caching is enabled [ 112.050299][ T6217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.108'. [ 112.072872][ T6183] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 112.266709][ T6217] vlan2: entered allmulticast mode [ 112.319734][ T6217] dummy0: entered allmulticast mode [ 112.333288][ T6217] Zero length message leads to an empty skb [ 112.335160][ T6213] rock: directory entry would overflow storage [ 112.376707][ T6183] BTRFS info (device loop3): rebuilding free space tree [ 112.414293][ T6213] rock: sig=0x4654, size=5, remaining=4 [ 112.568175][ T6183] BTRFS info (device loop3): disabling free space tree [ 112.596661][ T6183] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 112.665100][ T6183] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 112.993514][ T1158] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 113.057021][ T6248] loop1: detected capacity change from 0 to 512 [ 113.094726][ T6250] loop5: detected capacity change from 0 to 128 [ 113.198238][ T6248] EXT4-fs (loop1): too many log groups per flexible block group [ 113.229527][ T6248] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 113.239506][ T6248] EXT4-fs (loop1): mount failed [ 113.705232][ T5829] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 114.200450][ T6270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.121'. [ 114.269872][ T6270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.121'. [ 114.705461][ T6282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.128'. [ 114.750452][ T6282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.128'. [ 114.892045][ T6287] 9pnet_fd: Insufficient options for proto=fd [ 115.400539][ T30] audit: type=1326 audit(1746916245.329:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.0.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfb458e969 code=0x7ffc0000 [ 115.503099][ T30] audit: type=1326 audit(1746916245.349:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.0.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7fbfb458e969 code=0x7ffc0000 [ 115.547403][ T6303] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 115.583787][ T6301] loop3: detected capacity change from 0 to 512 [ 115.625546][ T30] audit: type=1326 audit(1746916245.349:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.0.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfb458e969 code=0x7ffc0000 [ 115.718132][ T6301] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.136: corrupted in-inode xattr: invalid ea_ino [ 115.836128][ T6301] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.136: couldn't read orphan inode 15 (err -117) [ 115.886088][ T6301] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.104736][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.244676][ T6274] loop5: detected capacity change from 0 to 32768 [ 116.478867][ T6274] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 116.745656][ T6274] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 116.792643][ T6274] XFS (loop5): Starting recovery (logdev: internal) [ 116.848248][ T6274] XFS (loop5): Ending recovery (logdev: internal) [ 117.217880][ T6341] loop4: detected capacity change from 0 to 512 [ 117.260693][ T5830] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 117.282108][ T6341] EXT4-fs (loop4): orphan cleanup on readonly fs [ 117.343657][ T6341] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.149: bg 0: block 248: padding at end of block bitmap is not set [ 117.422992][ T6341] Quota error (device loop4): write_blk: dquota write failed [ 117.454121][ T6341] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 117.467213][ T6341] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.149: Failed to acquire dquot type 1 [ 117.486480][ T6341] EXT4-fs (loop4): 1 truncate cleaned up [ 117.512217][ T6341] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 117.574557][ T6341] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 117.624395][ T6341] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 117.778183][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.925215][ T6358] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 118.287943][ T6326] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.665810][ T6380] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 118.727995][ T6382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.157'. [ 118.766813][ T6326] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.984447][ T6388] syz.2.162 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 119.051789][ T6326] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.198135][ T6390] loop5: detected capacity change from 0 to 512 [ 119.245182][ T6390] EXT4-fs (loop5): orphan cleanup on readonly fs [ 119.255303][ T6392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.164'. [ 119.267814][ T6390] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.163: bg 0: block 248: padding at end of block bitmap is not set [ 119.287745][ T6390] Quota error (device loop5): write_blk: dquota write failed [ 119.291358][ T6326] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.296428][ T6390] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 119.319846][ T6390] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.163: Failed to acquire dquot type 1 [ 119.358075][ T6390] EXT4-fs (loop5): 1 truncate cleaned up [ 119.380876][ T6390] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 119.441340][ T6398] netlink: 48 bytes leftover after parsing attributes in process `syz.0.166'. [ 119.478191][ T6390] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 119.518813][ T30] audit: type=1326 audit(1746916249.429:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6397 comm="syz.0.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfb458e969 code=0x7ffc0000 [ 119.546229][ T30] audit: type=1326 audit(1746916249.439:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6397 comm="syz.0.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fbfb458e969 code=0x7ffc0000 [ 119.576068][ T6390] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 119.619473][ T30] audit: type=1326 audit(1746916249.439:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6397 comm="syz.0.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfb458e969 code=0x7ffc0000 [ 119.684270][ T5830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.066124][ T6326] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.186913][ T6417] loop2: detected capacity change from 0 to 2048 [ 120.297733][ T6417] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.395572][ T5837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.491711][ T6326] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.601612][ T6426] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.769493][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 120.769512][ T30] audit: type=1326 audit(1746916250.689:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6434 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73c78e969 code=0x7ffc0000 [ 120.803686][ T6326] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.837093][ T30] audit: type=1326 audit(1746916250.689:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6434 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fa73c78e969 code=0x7ffc0000 [ 120.864099][ T30] audit: type=1326 audit(1746916250.689:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6434 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73c78e969 code=0x7ffc0000 [ 120.909181][ T30] audit: type=1326 audit(1746916250.689:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6434 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fa73c78e969 code=0x7ffc0000 [ 120.960547][ T30] audit: type=1326 audit(1746916250.689:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6434 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73c78e969 code=0x7ffc0000 [ 121.023398][ T6326] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.760541][ T6462] loop3: detected capacity change from 0 to 2048 [ 121.828500][ T6468] 9pnet_fd: Insufficient options for proto=fd [ 121.891133][ T6462] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.080609][ T6474] netlink: 'syz.0.194': attribute type 27 has an invalid length. [ 122.140760][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.494794][ T6492] loop5: detected capacity change from 0 to 764 [ 123.757225][ T6539] netlink: 28 bytes leftover after parsing attributes in process `syz.2.224'. [ 123.779572][ T6540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.225'. [ 123.811194][ T6539] netem: change failed [ 123.841693][ T6540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.850904][ T6540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.874309][ T6540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.950077][ T6540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.701470][ T6564] loop2: detected capacity change from 0 to 512 [ 124.715168][ T6533] loop5: detected capacity change from 0 to 32768 [ 124.734884][ T6564] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 124.757598][ T6533] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.222 (6533) [ 124.788841][ T6564] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 124.869340][ T6533] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 124.903934][ T6564] EXT4-fs (loop2): 1 truncate cleaned up [ 124.906686][ T6533] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 124.919553][ T6533] BTRFS info (device loop5): disk space caching is enabled [ 124.949274][ T6533] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 124.951719][ T6564] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.310846][ T6533] BTRFS info (device loop5): rebuilding free space tree [ 125.442762][ T6533] BTRFS info (device loop5): disabling free space tree [ 125.489555][ T6533] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 125.510119][ T5837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.540410][ T6533] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 125.766598][ T6608] pim6reg1: entered promiscuous mode [ 125.791765][ T6608] pim6reg1: entered allmulticast mode [ 125.799048][ T12] BTRFS info (device loop5): qgroup scan completed (inconsistency flag cleared) [ 126.177462][ T6622] IPv6: Can't replace route, no match found [ 126.209411][ T6622] netlink: 132 bytes leftover after parsing attributes in process `syz.3.252'. [ 126.249475][ T6624] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 126.276287][ T5830] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 126.581244][ T6634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.259'. [ 126.811826][ T6641] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 127.118142][ T6654] loop0: detected capacity change from 0 to 128 [ 127.370721][ T6658] syz.0.265: attempt to access beyond end of device [ 127.370721][ T6658] loop0: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 127.479476][ T6658] syz.0.265: attempt to access beyond end of device [ 127.479476][ T6658] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 127.549292][ T6658] syz.0.265: attempt to access beyond end of device [ 127.549292][ T6658] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 127.662004][ T6658] syz.0.265: attempt to access beyond end of device [ 127.662004][ T6658] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 127.754092][ T6658] syz.0.265: attempt to access beyond end of device [ 127.754092][ T6658] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 128.002819][ T6677] loop4: detected capacity change from 0 to 256 [ 128.076089][ T6677] vfat: Bad value for 'shortname' [ 128.274851][ T6658] syz.0.265: attempt to access beyond end of device [ 128.274851][ T6658] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 128.381718][ T6658] syz.0.265: attempt to access beyond end of device [ 128.381718][ T6658] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 128.450612][ T6682] loop1: detected capacity change from 0 to 1024 [ 128.521394][ T6658] syz.0.265: attempt to access beyond end of device [ 128.521394][ T6658] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 128.596283][ T6658] syz.0.265: attempt to access beyond end of device [ 128.596283][ T6658] loop0: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 128.671006][ T6682] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 128.724245][ T6682] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 128.787864][ T6682] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.280: Failed to acquire dquot type 0 [ 128.877532][ T6682] EXT4-fs (loop1): 1 truncate cleaned up [ 128.899176][ T6682] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.964140][ T6682] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.202880][ T6682] loop1: detected capacity change from 0 to 164 [ 129.241017][ T6682] grow_buffers: requested out-of-range block 18446744072635809824 for device loop1 [ 129.349308][ T6682] isofs_fill_super: bread failed, dev=loop1, iso_blknum=1610612752, block=-1073741792 [ 129.681136][ T6724] loop1: detected capacity change from 0 to 128 [ 129.892298][ T6724] loop1: detected capacity change from 128 to 0 [ 129.913653][ T6724] [ 129.915991][ T6724] ====================================================== [ 129.923005][ T6724] WARNING: possible circular locking dependency detected [ 129.930020][ T6724] 6.15.0-rc5-syzkaller-00275-gbec6f00f120e #0 Not tainted [ 129.937124][ T6724] ------------------------------------------------------ [ 129.944127][ T6724] syz.1.298/6724 is trying to acquire lock: [ 129.950004][ T6724] ffffffff8f657bc8 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 129.960562][ T6724] [ 129.960562][ T6724] but task is already holding lock: [ 129.967911][ T6724] ffff888142794ea8 (&q->q_usage_counter(io)#18){++++}-{0:0}, at: loop_set_status+0x225/0xaf0 [ 129.978117][ T6724] [ 129.978117][ T6724] which lock already depends on the new lock. [ 129.978117][ T6724] [ 129.988514][ T6724] [ 129.988514][ T6724] the existing dependency chain (in reverse order) is: [ 129.997518][ T6724] [ 129.997518][ T6724] -> #2 (&q->q_usage_counter(io)#18){++++}-{0:0}: [ 130.006139][ T6724] lock_acquire+0x120/0x360 [ 130.011172][ T6724] blk_alloc_queue+0x538/0x620 [ 130.016457][ T6724] __blk_mq_alloc_disk+0x164/0x350 [ 130.022114][ T6724] loop_add+0x41d/0xae0 [ 130.026801][ T6724] loop_init+0x173/0x230 [ 130.031560][ T6724] do_one_initcall+0x236/0x820 [ 130.036857][ T6724] do_initcall_level+0x137/0x1f0 [ 130.042315][ T6724] do_initcalls+0x69/0xd0 [ 130.047166][ T6724] kernel_init_freeable+0x3d9/0x570 [ 130.052883][ T6724] kernel_init+0x1d/0x1d0 [ 130.057736][ T6724] ret_from_fork+0x4e/0x80 [ 130.062672][ T6724] ret_from_fork_asm+0x1a/0x30 [ 130.067954][ T6724] [ 130.067954][ T6724] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 130.075191][ T6724] lock_acquire+0x120/0x360 [ 130.080220][ T6724] fs_reclaim_acquire+0x72/0x100 [ 130.085689][ T6724] kmem_cache_alloc_node_noprof+0x47/0x3c0 [ 130.092015][ T6724] __alloc_skb+0x112/0x2d0 [ 130.096948][ T6724] alloc_uevent_skb+0x7d/0x230 [ 130.102257][ T6724] kobject_uevent_net_broadcast+0x2fa/0x560 [ 130.108763][ T6724] kobject_uevent_env+0x55b/0x8c0 [ 130.114314][ T6724] kobject_synth_uevent+0x527/0xb00 [ 130.120041][ T6724] bus_uevent_store+0x115/0x170 [ 130.125424][ T6724] kernfs_fop_write_iter+0x378/0x4f0 [ 130.131224][ T6724] vfs_write+0x54b/0xa90 [ 130.135982][ T6724] ksys_write+0x145/0x250 [ 130.140826][ T6724] do_syscall_64+0xf6/0x210 [ 130.145854][ T6724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.152261][ T6724] [ 130.152261][ T6724] -> #0 (uevent_sock_mutex){+.+.}-{4:4}: [ 130.160092][ T6724] validate_chain+0xb9b/0x2140 [ 130.165368][ T6724] __lock_acquire+0xaac/0xd20 [ 130.170576][ T6724] lock_acquire+0x120/0x360 [ 130.175602][ T6724] __mutex_lock+0x182/0xe80 [ 130.180625][ T6724] kobject_uevent_net_broadcast+0x27e/0x560 [ 130.187042][ T6724] kobject_uevent_env+0x55b/0x8c0 [ 130.192593][ T6724] loop_set_status+0x4d1/0xaf0 [ 130.197880][ T6724] lo_ioctl+0xa5d/0x2410 [ 130.202730][ T6724] blkdev_ioctl+0x5a8/0x6d0 [ 130.207749][ T6724] __se_sys_ioctl+0xfc/0x170 [ 130.212851][ T6724] do_syscall_64+0xf6/0x210 [ 130.217891][ T6724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.224300][ T6724] [ 130.224300][ T6724] other info that might help us debug this: [ 130.224300][ T6724] [ 130.234514][ T6724] Chain exists of: [ 130.234514][ T6724] uevent_sock_mutex --> fs_reclaim --> &q->q_usage_counter(io)#18 [ 130.234514][ T6724] [ 130.248278][ T6724] Possible unsafe locking scenario: [ 130.248278][ T6724] [ 130.255721][ T6724] CPU0 CPU1 [ 130.261079][ T6724] ---- ---- [ 130.266452][ T6724] lock(&q->q_usage_counter(io)#18); [ 130.271839][ T6724] lock(fs_reclaim); [ 130.278340][ T6724] lock(&q->q_usage_counter(io)#18); [ 130.286239][ T6724] lock(uevent_sock_mutex); [ 130.290825][ T6724] [ 130.290825][ T6724] *** DEADLOCK *** [ 130.290825][ T6724] [ 130.298954][ T6724] 3 locks held by syz.1.298/6724: [ 130.303966][ T6724] #0: ffff88802452b368 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_set_status+0x2a/0xaf0 [ 130.313394][ T6724] #1: ffff888142794ea8 (&q->q_usage_counter(io)#18){++++}-{0:0}, at: loop_set_status+0x225/0xaf0 [ 130.324045][ T6724] #2: ffff888142794ee0 (&q->q_usage_counter(queue)#19){+.+.}-{0:0}, at: loop_set_status+0x225/0xaf0 [ 130.334961][ T6724] [ 130.334961][ T6724] stack backtrace: [ 130.340836][ T6724] CPU: 0 UID: 0 PID: 6724 Comm: syz.1.298 Not tainted 6.15.0-rc5-syzkaller-00275-gbec6f00f120e #0 PREEMPT(full) [ 130.340862][ T6724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 130.340875][ T6724] Call Trace: [ 130.340884][ T6724] [ 130.340892][ T6724] dump_stack_lvl+0x189/0x250 [ 130.340928][ T6724] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.340961][ T6724] ? __pfx__printk+0x10/0x10 [ 130.340984][ T6724] ? print_lock_name+0xde/0x100 [ 130.341022][ T6724] print_circular_bug+0x2ee/0x310 [ 130.341048][ T6724] check_noncircular+0x134/0x160 [ 130.341073][ T6724] validate_chain+0xb9b/0x2140 [ 130.341099][ T6724] ? number+0xd18/0xf60 [ 130.341144][ T6724] __lock_acquire+0xaac/0xd20 [ 130.341178][ T6724] ? kobject_uevent_net_broadcast+0x27e/0x560 [ 130.341211][ T6724] lock_acquire+0x120/0x360 [ 130.341240][ T6724] ? kobject_uevent_net_broadcast+0x27e/0x560 [ 130.341283][ T6724] __mutex_lock+0x182/0xe80 [ 130.341309][ T6724] ? kobject_uevent_net_broadcast+0x27e/0x560 [ 130.341344][ T6724] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.341370][ T6724] ? vsnprintf+0xe11/0xf00 [ 130.341406][ T6724] ? kobject_uevent_net_broadcast+0x27e/0x560 [ 130.341442][ T6724] ? __pfx___mutex_lock+0x10/0x10 [ 130.341468][ T6724] ? add_uevent_var+0x278/0x450 [ 130.341504][ T6724] ? kobject_uevent_env+0x50a/0x8c0 [ 130.341536][ T6724] ? __pfx_add_uevent_var+0x10/0x10 [ 130.341570][ T6724] kobject_uevent_net_broadcast+0x27e/0x560 [ 130.341608][ T6724] kobject_uevent_env+0x55b/0x8c0 [ 130.341646][ T6724] loop_set_status+0x4d1/0xaf0 [ 130.341683][ T6724] lo_ioctl+0xa5d/0x2410 [ 130.341715][ T6724] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.341740][ T6724] ? stack_trace_save+0x9c/0xe0 [ 130.341763][ T6724] ? __pfx_lo_ioctl+0x10/0x10 [ 130.341790][ T6724] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.341815][ T6724] ? stack_depot_save_flags+0x40/0x910 [ 130.341842][ T6724] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.341867][ T6724] ? kasan_save_track+0x4f/0x80 [ 130.341890][ T6724] ? kasan_save_track+0x3e/0x80 [ 130.341912][ T6724] ? kasan_save_free_info+0x46/0x50 [ 130.341945][ T6724] ? __kasan_slab_free+0x62/0x70 [ 130.341969][ T6724] ? kfree+0x193/0x440 [ 130.341993][ T6724] ? tomoyo_check_open_permission+0x2c2/0x3b0 [ 130.342014][ T6724] ? security_file_open+0xb1/0x270 [ 130.342048][ T6724] ? do_dentry_open+0x35e/0x1970 [ 130.342079][ T6724] ? path_openat+0x2ee5/0x3830 [ 130.342106][ T6724] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.342131][ T6724] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.342156][ T6724] ? cgroup_rstat_updated+0x144/0xb50 [ 130.342193][ T6724] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 130.342228][ T6724] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.342253][ T6724] ? __lock_acquire+0xaac/0xd20 [ 130.342287][ T6724] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.342312][ T6724] ? __lock_acquire+0xaac/0xd20 [ 130.342354][ T6724] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.342382][ T6724] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.342407][ T6724] ? __lock_acquire+0xaac/0xd20 [ 130.342446][ T6724] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.342474][ T6724] ? is_bpf_text_address+0x26/0x2b0 [ 130.342507][ T6724] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.342532][ T6724] ? is_bpf_text_address+0x292/0x2b0 [ 130.342562][ T6724] ? is_bpf_text_address+0x26/0x2b0 [ 130.342594][ T6724] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.342620][ T6724] ? kernel_text_address+0xa5/0xe0 [ 130.342650][ T6724] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.342675][ T6724] ? __kernel_text_address+0xd/0x40 [ 130.342703][ T6724] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.342728][ T6724] ? unwind_get_return_address+0x4d/0x90 [ 130.342755][ T6724] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 130.342779][ T6724] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.342804][ T6724] ? arch_stack_walk+0xfc/0x150 [ 130.342838][ T6724] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.342864][ T6724] ? stack_trace_save+0x9c/0xe0 [ 130.342888][ T6724] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.342913][ T6724] ? stack_depot_save_flags+0x40/0x910 [ 130.342933][ T6724] ? __entry_text_end+0x1020c5/0x1020c9 [ 130.342958][ T6724] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.342987][ T6724] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.343012][ T6724] ? kasan_save_track+0x4f/0x80 [ 130.343034][ T6724] ? kasan_save_track+0x3e/0x80 [ 130.343058][ T6724] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.343083][ T6724] ? do_vfs_ioctl+0xf36/0x1eb0 [ 130.343108][ T6724] ? __se_sys_ioctl+0x47/0x170 [ 130.343128][ T6724] ? do_syscall_64+0xf6/0x210 [ 130.343156][ T6724] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 130.343197][ T6724] ? kasan_quarantine_put+0xdd/0x220 [ 130.343219][ T6724] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.343247][ T6724] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.343272][ T6724] ? blkdev_common_ioctl+0xfc3/0x2450 [ 130.343298][ T6724] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.343325][ T6724] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 130.343362][ T6724] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 130.343387][ T6724] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 130.343423][ T6724] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.343448][ T6724] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 130.343484][ T6724] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 130.343520][ T6724] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 130.343560][ T6724] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 130.343587][ T6724] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.343613][ T6724] ? __lock_acquire+0xaac/0xd20 [ 130.343651][ T6724] ? __pfx_lo_ioctl+0x10/0x10 [ 130.343678][ T6724] blkdev_ioctl+0x5a8/0x6d0 [ 130.343705][ T6724] ? __pfx_blkdev_ioctl+0x10/0x10 [ 130.343728][ T6724] ? __fget_files+0x3a0/0x420 [ 130.343757][ T6724] ? __fget_files+0x2a/0x420 [ 130.343786][ T6724] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.343812][ T6724] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.343838][ T6724] ? __pfx_blkdev_ioctl+0x10/0x10 [ 130.343863][ T6724] __se_sys_ioctl+0xfc/0x170 [ 130.343885][ T6724] do_syscall_64+0xf6/0x210 [ 130.343913][ T6724] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.343938][ T6724] ? exc_page_fault+0x91/0x110 [ 130.343964][ T6724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.343985][ T6724] RIP: 0033:0x7f2ad498e969 [ 130.344003][ T6724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.344021][ T6724] RSP: 002b:00007f2ad27f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 130.344042][ T6724] RAX: ffffffffffffffda RBX: 00007f2ad4bb5fa0 RCX: 00007f2ad498e969 [ 130.344059][ T6724] RDX: 00002000000000c0 RSI: 0000000000004c04 RDI: 0000000000000005 [ 130.344073][ T6724] RBP: 00007f2ad4a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 130.344091][ T6724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.344104][ T6724] R13: 0000000000000000 R14: 00007f2ad4bb5fa0 R15: 00007ffd632b7da8 [ 130.344128][ T6724] [ 131.043308][ C1] I/O error, dev loop1, sector 33 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 131.043412][ T6725] syz.1.298: attempt to access beyond end of device [ 131.043412][ T6725] loop1: rw=524288, sector=34, nr_sectors = 1 limit=0 [ 131.054285][ T6730] IPv4: Oversized IP packet from 127.202.26.0 [ 131.066858][ T6725] FAT-fs (loop1): Directory bread(block 33) failed [ 131.097825][ T6725] FAT-fs (loop1): Directory bread(block 34) failed [ 131.105502][ T6725] FAT-fs (loop1): Directory bread(block 35) failed [ 131.112316][ T6725] FAT-fs (loop1): Directory bread(block 36) failed [ 131.118952][ T6725] FAT-fs (loop1): Directory bread(block 37) failed [ 131.129465][ T6725] FAT-fs (loop1): Directory bread(block 38) failed [ 131.136170][ T6725] FAT-fs (loop1): Directory bread(block 39) failed [ 131.165234][ T6725] FAT-fs (loop1): Directory bread(block 40) failed [ 131.190323][ T6725] FAT-fs (loop1): Directory bread(block 33) failed [ 131.196887][ T6725] FAT-fs (loop1): Directory bread(block 34) failed [ 131.252713][ T5995] FAT-fs (loop1): bread failed in fat_clusters_flush [ 131.260981][ T5834] FAT-fs (loop1): unable to read boot sector to mark fs as dirty [ 131.426463][ T36] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.484929][ T36] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.552575][ T36] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.614772][ T36] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.721998][ T36] bridge_slave_1: left allmulticast mode [ 131.727660][ T36] bridge_slave_1: left promiscuous mode [ 131.739512][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.748362][ T36] bridge_slave_0: left allmulticast mode [ 131.755919][ T36] bridge_slave_0: left promiscuous mode [ 131.763063][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.888295][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.898528][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.908346][ T36] bond0 (unregistering): Released all slaves [ 132.117256][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.138479][ T36] hsr_slave_0: left promiscuous mode [ 132.155463][ T36] hsr_slave_1: left promiscuous mode [ 132.165670][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.178780][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.193184][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.201484][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.217052][ T36] veth1_macvtap: left promiscuous mode [ 132.231132][ T36] veth0_macvtap: left promiscuous mode [ 132.236696][ T36] veth1_vlan: left promiscuous mode [ 132.260103][ T36] veth0_vlan: left promiscuous mode [ 132.524691][ T36] team0 (unregistering): Port device team_slave_1 removed [ 132.544934][ T36] team0 (unregistering): Port device team_slave_0 removed [ 132.619097][ T36] dummy0 (unregistering): left allmulticast mode