last executing test programs: 5.760600474s ago: executing program 2 (id=51): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x404c804) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 4.834832438s ago: executing program 1 (id=61): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$key(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/156, 0x9c}], 0x1}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a801800048014000480080002000000000008"], 0x3c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.776807413s ago: executing program 4 (id=62): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.776483184s ago: executing program 2 (id=63): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) semtimedop(0x0, 0x0, 0x0, 0x0) 4.673772643s ago: executing program 2 (id=65): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f00000018c0)=[{{&(0x7f0000000180)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x10}}], 0x1, 0x0) 4.620768768s ago: executing program 4 (id=66): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) unshare(0x24020400) openat$zero(0xffffffffffffff9c, 0x0, 0x6e40c0, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) unshare(0x22020600) ioctl$TUNSETOFFLOAD(r1, 0x40047451, 0x2000000c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 4.614549349s ago: executing program 1 (id=67): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000500)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34a9e42d07d80ec4500490af81ec29d06ff32465ad17a550f034fff344f609c9c3bd09aec89a9756c2de823523a0089d1bed", 0xfffffffffffffeca, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x40}, 0x1c) recvmsg(r0, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110) 4.476849231s ago: executing program 2 (id=69): syz_usb_connect(0x6, 0x2d, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0009005203000904002c11018b7500090583"], 0x0) setresgid(0xee00, 0xee01, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) inotify_init1(0x800) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) write$binfmt_elf64(r0, &(0x7f00000002c0)=ANY=[], 0xfd14) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x57e00}], 0x2, 0x1200, 0x41001, 0x3) 4.463357283s ago: executing program 4 (id=70): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x31}, 0x4}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 4.280467109s ago: executing program 4 (id=74): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x8f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@lazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@block_validity}, {@block_validity}, {@quota}]}, 0x1, 0x452, &(0x7f0000000780)="$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") 3.808822432s ago: executing program 2 (id=77): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000004, 0x28011, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x5e, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2006, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = syz_open_procfs(0x0, 0x0) preadv(r5, 0x0, 0x0, 0x12e, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) timer_create(0x2, 0x0, &(0x7f0000000100)) unshare(0x64000600) 2.74103556s ago: executing program 0 (id=82): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RLERRORu(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) 2.7406157s ago: executing program 1 (id=83): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00002b9d1bbbf59ba59c04e2595527aeaac419", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000011c0)={'vxcan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000010000090000003c000380140002007663616e3000000000000000000000000800030000000000080001000100000014000600ff"], 0x50}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x8, 0x0, 0x3, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000002c0)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, &(0x7f0000002b80), 0x41000004, 0x0) r6 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file1/file4\x00', 0x2) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) 2.728530601s ago: executing program 2 (id=84): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x8000000, 0x238, 0xf8, 0x720d, 0x148, 0xf8, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) sendto$inet(r0, 0x0, 0x0, 0x24000080, 0x0, 0x0) 2.187250101s ago: executing program 1 (id=87): syz_usb_connect(0x6, 0x2d, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0009005203000904002c11018b7500090583"], 0x0) setresgid(0xee00, 0xee01, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) inotify_init1(0x800) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) write$binfmt_elf64(r0, &(0x7f00000002c0)=ANY=[], 0xfd14) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x57e00}], 0x2, 0x1200, 0x41001, 0x3) 1.924738155s ago: executing program 3 (id=88): syz_emit_ethernet(0x42, &(0x7f0000000700)={@local, @remote, @void, {@ipv4={0x800, @tipc={{0x7, 0x4, 0x1, 0x0, 0x34, 0x65, 0x0, 0x3, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@lsrr={0x83, 0x3, 0xfe}, @rr={0x7, 0x3, 0x99}]}}, @payload_conn={{{0x18, 0x0, 0x1, 0x1, 0x1, 0x6, 0x0, 0x2, 0x9, 0x0, 0x1, 0x7, 0x5, 0x0, 0x4, 0x0, 0x0, 0x4e24, 0x4e20}}}}}}}, 0x0) 1.901521727s ago: executing program 3 (id=89): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1.860179011s ago: executing program 0 (id=90): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e80)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYBLOB="0300000000000000240012800c0001"], 0x54}}, 0x0) 1.688555586s ago: executing program 4 (id=91): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@empty, 0x0, 0x7ff, 0x0, 0x100, 0xa, 0x0, 0x80}, {}, {0xffffffffffffffff}}}, 0xb8}}, 0x0) 1.688321786s ago: executing program 0 (id=92): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340)) 1.595611974s ago: executing program 1 (id=93): dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000d50000002a00c50095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r3}, 0x11) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20044194) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@private2, 0x0, r2}) 1.475301816s ago: executing program 4 (id=94): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000ed17110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) request_key(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000300)='net/rt_cache\x00', 0xfffffffffffffffd) 1.380587505s ago: executing program 1 (id=95): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x1, 0xd4, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc2, 0x3, 0x1, 0xb2, 0x80, 0x40, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x401, 0xa}, [@selector_unit={0xb, 0x24, 0x5, 0x2, 0x0, "22f7006b6ebe"}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x202, 0x4, 0x5, 0x87f, 0x4, 0x5e}, @feature_unit={0xd, 0x24, 0x6, 0x3, 0x4, 0x3, [0x7, 0x1, 0x6], 0x4}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x201, 0x3, 0x3, 0x2, 0x9, 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x2, 0x1, 0x80, 0xaa}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xe, 0x2, 0xb0, 0x9, "c5e5a6da"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x3ff, 0x7, 0x5}, @as_header={0x7, 0x24, 0x1, 0x5}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x4, 0x299, 0x84, "b639fd19652e"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x8, 0x3, 0x1, {0x7, 0x25, 0x1, 0x80, 0xbb}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x410, 0x7, 0x3, 0x3, {0x7, 0x25, 0x1, 0x83, 0x3, 0x3ff}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x300, 0xf, 0x5, 0x8, 0x8, 0x8}, 0x3c, &(0x7f0000000280)={0x5, 0xf, 0x3c, 0x6, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0xe, 0x2, 0x4, 0xf000, 0x6, [0x0, 0x30]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x3, 0x6a, 0x2, 0x80}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0x5, 0xa, 0x6}, @wireless={0xb, 0x10, 0x1, 0x8, 0xd, 0x3, 0x7, 0x40, 0x7f}]}, 0x5, [{0x32, &(0x7f00000002c0)=@string={0x32, 0x3, "914113ceea69b7f96aa7398750520d0f335c830ca5a8ee5c3edf77bd75864711e6fa3ff31d3bb740865eca5c62b66e12"}}, {0xb0, &(0x7f0000000340)=@string={0xb0, 0x3, "b6622400d5bcd7f52c8b9433368aa845c1966aea443c77668f047fc58898240dc4d8c94037b8854f27c73438a50262c5e02001d70d855676b0bc42cb40c6ebbd9fadad15219d6541f33ee0dd5759e729506c287e7660fbde8ea71729c6b02ffa6bc2014bff74528531c0c9794e03ac070aadeb169a8ceeed6d4445dccc592967e2fb19f92abd4bcbcf43616b78d36e58438e4887bb67f3a29ed95d61593477584e276a462a43d663f1c805fa6d3a"}}, {0x94, &(0x7f0000000400)=@string={0x94, 0x3, "ad760cd003bc071ec9bc1d0a18384f257f1b7b0851519d2ed948eff177b84b7ed6117555c2647332a18543bacf4db28b6729525f50842bb55ad7bbaec3dfa607c16d61d39606fbe83a602a621c3693927c736e586795bac77dedc751fa9b5594dffbe4d99d280b754bf61721b6d6ce5669cd06c8d0bbbf04165acff11c4b4ff8f7e7709e5ad0245a03fc08d53b1454e93caa"}}, {0xda, &(0x7f00000004c0)=@string={0xda, 0x3, "88c8b1dfbe9db76d0465a542ca9ddc74febe78a51284243280602a0fe8f0eb2164ddb6dc97ea3db86a63629335f080128675b0ec62f410a013b0e46676143e1e45a333e4f27d9840a6050b125a2d5f053dc2b7764c06b64dbfcbac286dd988597f00a30a80ac4fa5415348a8b16d5e8b9eacd804771da91ffb39eb09ef83685e1e0bbd43bbf007d5ec391e38499124fe2c08842e7a5d301a04ece56ed12070155d6037c2a5347d161ebebd2d62c11e7ee13cc2b1cd69f134572eeb956a5651866f71407b8b2f0550ccb5161faec211303f711a3dacedb766"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x1001}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x8048}], 0x1, 0x5412, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x1c507e, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffd, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0xaf0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYRES32], 0x58}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[], 0x58}}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000080)=0x454e, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYRES16, @ANYRES8=r3], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r7, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d3000dd602000000005cf7ce1fc986bcdf"}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r10, @ANYBLOB="8000f2000a000200aaaaaaaaaa0c"], 0x28}}, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 904.878978ms ago: executing program 3 (id=96): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x80}, 0x1910, 0x400001}, 0x20) 862.873412ms ago: executing program 3 (id=97): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000000c0)={[{@grpquota}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@resgid}, {@usrquota}, {@data_err_abort}, {@errors_remount}]}, 0x1, 0x5d8, &(0x7f0000001200)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x5, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) 764.861531ms ago: executing program 0 (id=98): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000a40)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f0000000140)='./file0\x00') mkdir(&(0x7f0000000000)='./control\x00', 0x0) 480.158107ms ago: executing program 3 (id=99): sendmsg$key(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/156, 0x9c}], 0x1}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000130001", @ANYBLOB], 0x3c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 265.386086ms ago: executing program 3 (id=100): r0 = syz_io_uring_setup(0xc73, &(0x7f0000000140)={0x0, 0x7e1c, 0x0, 0x0, 0xffffffff}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 144.738267ms ago: executing program 0 (id=101): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x2000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xa, 0x0, 0x7ffc0002}]}) semget$private(0x0, 0x6, 0x0) 0s ago: executing program 0 (id=102): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000003c0), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) socket$key(0xf, 0x3, 0x2) syz_usb_connect(0x2, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000004000000e47f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000300"/28], 0x48) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/wireless\x00') readv(r2, &(0x7f00000008c0)=[{&(0x7f0000000980)=""/117, 0x75}, {&(0x7f0000000380)=""/79, 0x4f}], 0x2) openat$cgroup_ro(r2, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.95' (ED25519) to the list of known hosts. [ 52.393828][ T3557] cgroup: Unknown subsys name 'net' [ 52.538131][ T3557] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 54.020545][ T3557] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 55.387241][ T3569] chnl_net:caif_netlink_parms(): no params data found [ 55.397290][ T3568] chnl_net:caif_netlink_parms(): no params data found [ 55.456226][ T3576] chnl_net:caif_netlink_parms(): no params data found [ 55.569662][ T3577] chnl_net:caif_netlink_parms(): no params data found [ 55.588326][ T3569] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.595509][ T3569] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.604298][ T3569] device bridge_slave_0 entered promiscuous mode [ 55.616684][ T3569] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.624337][ T3569] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.632734][ T3569] device bridge_slave_1 entered promiscuous mode [ 55.676344][ T3578] chnl_net:caif_netlink_parms(): no params data found [ 55.715124][ T3569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.724619][ T3568] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.731864][ T3568] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.740002][ T3568] device bridge_slave_0 entered promiscuous mode [ 55.760226][ T3576] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.767484][ T3576] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.775433][ T3576] device bridge_slave_0 entered promiscuous mode [ 55.787202][ T3576] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.794768][ T3576] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.802695][ T3576] device bridge_slave_1 entered promiscuous mode [ 55.811160][ T3569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.829279][ T3568] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.836508][ T3568] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.845183][ T3568] device bridge_slave_1 entered promiscuous mode [ 55.906081][ T3569] team0: Port device team_slave_0 added [ 55.932987][ T3576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.943604][ T3569] team0: Port device team_slave_1 added [ 55.950797][ T3576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.962267][ T3568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.971485][ T3577] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.978716][ T3577] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.987125][ T3577] device bridge_slave_0 entered promiscuous mode [ 56.015900][ T3568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.025446][ T3577] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.032662][ T3577] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.040681][ T3577] device bridge_slave_1 entered promiscuous mode [ 56.094347][ T3569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.101739][ T3569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.128011][ T3569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.142323][ T3576] team0: Port device team_slave_0 added [ 56.148575][ T3569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.155716][ T3569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.181862][ T3569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.208003][ T3578] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.215777][ T3578] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.223775][ T3578] device bridge_slave_0 entered promiscuous mode [ 56.232518][ T3576] team0: Port device team_slave_1 added [ 56.238412][ T3578] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.246396][ T3578] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.254843][ T3578] device bridge_slave_1 entered promiscuous mode [ 56.268992][ T3568] team0: Port device team_slave_0 added [ 56.277725][ T3577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.312562][ T3568] team0: Port device team_slave_1 added [ 56.329111][ T3577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.354006][ T3576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.361001][ T3576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.387187][ T3576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.408647][ T3578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.434292][ T3576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.441503][ T3576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.467619][ T3576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.487176][ T3578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.511180][ T3569] device hsr_slave_0 entered promiscuous mode [ 56.518235][ T3569] device hsr_slave_1 entered promiscuous mode [ 56.529748][ T3568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.537019][ T3568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.563355][ T3568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.585406][ T3577] team0: Port device team_slave_0 added [ 56.593780][ T3577] team0: Port device team_slave_1 added [ 56.601200][ T3568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.608868][ T3568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.635182][ T3568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.697909][ T3578] team0: Port device team_slave_0 added [ 56.723833][ T3577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.730848][ T3577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.757192][ T3577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.779375][ T3578] team0: Port device team_slave_1 added [ 56.800149][ T3568] device hsr_slave_0 entered promiscuous mode [ 56.807177][ T3568] device hsr_slave_1 entered promiscuous mode [ 56.814490][ T3568] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.822401][ T3568] Cannot create hsr debugfs directory [ 56.828340][ T3577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.835569][ T3577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.861567][ T3577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.876107][ T3576] device hsr_slave_0 entered promiscuous mode [ 56.883920][ T3576] device hsr_slave_1 entered promiscuous mode [ 56.890652][ T3576] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.898589][ T3576] Cannot create hsr debugfs directory [ 56.916634][ T3578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.924135][ T3578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.950865][ T3578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.967603][ T3578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.974922][ T3578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.000862][ T3578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.052450][ T3570] Bluetooth: hci0: command 0x0409 tx timeout [ 57.059182][ T3570] Bluetooth: hci1: command 0x0409 tx timeout [ 57.123847][ T3578] device hsr_slave_0 entered promiscuous mode [ 57.130518][ T3578] device hsr_slave_1 entered promiscuous mode [ 57.136868][ T3570] Bluetooth: hci4: command 0x0409 tx timeout [ 57.141643][ T3579] Bluetooth: hci2: command 0x0409 tx timeout [ 57.148962][ T3579] Bluetooth: hci3: command 0x0409 tx timeout [ 57.155457][ T3578] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.163100][ T3578] Cannot create hsr debugfs directory [ 57.171891][ T3577] device hsr_slave_0 entered promiscuous mode [ 57.178720][ T3577] device hsr_slave_1 entered promiscuous mode [ 57.185387][ T3577] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.193306][ T3577] Cannot create hsr debugfs directory [ 57.453234][ T3569] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.469327][ T3569] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.485362][ T3569] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.500548][ T3569] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.542163][ T3568] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.556321][ T3568] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.576267][ T3568] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.590229][ T3568] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.623342][ T3578] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.657088][ T3578] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.667799][ T3578] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.686731][ T3578] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.750779][ T3569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.759541][ T3576] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.795473][ T3576] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.809499][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.820463][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.840171][ T3577] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.855305][ T3569] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.863616][ T3576] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.876404][ T3577] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.887184][ T3577] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.897383][ T3576] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.915402][ T3577] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.928288][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.937546][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.947485][ T1432] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.954807][ T1432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.967199][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.980778][ T3568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.006769][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.017645][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.026672][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.033800][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.059342][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.083187][ T3568] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.095253][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.104787][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.115063][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.124163][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.133454][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.140513][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.148610][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.164437][ T3578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.186645][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.199658][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.209591][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.219720][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.233056][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.242398][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.252370][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.259427][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.289098][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.298081][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.307200][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.316264][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.325145][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.335542][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.344082][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.356967][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.383876][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.404717][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.413894][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.434979][ T3578] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.454557][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.463447][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.471376][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.479264][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.490608][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.504935][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.513919][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.532678][ T3576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.548954][ T3568] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.569428][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.582462][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.598418][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.607289][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.614405][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.623349][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.632361][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.640678][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.653386][ T3577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.692824][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.702632][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.712548][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.719631][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.728229][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.737501][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.745493][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.754187][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.764538][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.774579][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.788998][ T3576] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.800817][ T3577] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.820255][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.830368][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.838846][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.847096][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.860786][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.870953][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.880561][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.890566][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.897817][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.906860][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.914923][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.922527][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.935373][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.944743][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.954065][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.961254][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.974908][ T3569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.005700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.014571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.023910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.032010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.039566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.048559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.058187][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.065283][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.073925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.082733][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.091073][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.098203][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.106826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.116378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.124819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.132713][ T3611] Bluetooth: hci1: command 0x041b tx timeout [ 59.138762][ T3611] Bluetooth: hci0: command 0x041b tx timeout [ 59.155458][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.167934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.187805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.198008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.211811][ T3612] Bluetooth: hci3: command 0x041b tx timeout [ 59.214289][ T3568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.219055][ T3612] Bluetooth: hci2: command 0x041b tx timeout [ 59.234456][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.244467][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.246076][ T3612] Bluetooth: hci4: command 0x041b tx timeout [ 59.288934][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.302778][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.318435][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.327690][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.338203][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.347248][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.356362][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.365251][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.373969][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.383511][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.392495][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.414609][ T3576] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.425443][ T3576] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.438722][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.451850][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.460300][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.469811][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.478807][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.489472][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.498706][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.507756][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.516355][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.568645][ T3578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.588028][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.599827][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.614477][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.627747][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.638398][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.647738][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.658153][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.666506][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.678172][ T3568] device veth0_vlan entered promiscuous mode [ 59.710611][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.733149][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.763162][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.772818][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.794290][ T3568] device veth1_vlan entered promiscuous mode [ 59.810466][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.819084][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.827455][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.837728][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.845878][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.860015][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.868493][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.877646][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.885698][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.903046][ T3569] device veth0_vlan entered promiscuous mode [ 59.909680][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.917935][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.928824][ T3578] device veth0_vlan entered promiscuous mode [ 59.948893][ T3578] device veth1_vlan entered promiscuous mode [ 59.960488][ T3577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.973423][ T3576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.985055][ T3569] device veth1_vlan entered promiscuous mode [ 60.042283][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.050659][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.064076][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.072954][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.081187][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.089559][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.098884][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.111251][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.122124][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.132983][ T3568] device veth0_macvtap entered promiscuous mode [ 60.145415][ T3568] device veth1_macvtap entered promiscuous mode [ 60.154974][ T3578] device veth0_macvtap entered promiscuous mode [ 60.170128][ T3569] device veth0_macvtap entered promiscuous mode [ 60.184023][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.196172][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.205115][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.213699][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.223726][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.233154][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.242397][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.250961][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.275201][ T3578] device veth1_macvtap entered promiscuous mode [ 60.298392][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.307966][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.323120][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.347339][ T3568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.363148][ T3569] device veth1_macvtap entered promiscuous mode [ 60.382874][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.390859][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.398973][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.407317][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.419148][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.429851][ T3576] device veth0_vlan entered promiscuous mode [ 60.449366][ T3568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.457114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.466410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.476528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.485343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.510260][ T3576] device veth1_vlan entered promiscuous mode [ 60.524137][ T3568] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.533291][ T3568] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.543062][ T3568] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.551989][ T3568] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.567714][ T3569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.579942][ T3569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.591939][ T3569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.600388][ T3578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.611430][ T3578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.621917][ T3578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.632633][ T3578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.645311][ T3578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.671200][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.683294][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.693516][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.702896][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.719466][ T3569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.730374][ T3569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.744977][ T3569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.756198][ T3569] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.765451][ T3569] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.774625][ T3569] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.783851][ T3569] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.806108][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.815696][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.832718][ T3578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.844552][ T3578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.856846][ T3578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.869201][ T3578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.881166][ T3578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.893703][ T3577] device veth0_vlan entered promiscuous mode [ 60.924252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.943310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.952182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.960368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.969446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.977870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.988935][ T3578] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.998687][ T3578] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.007917][ T3578] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.017021][ T3578] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.056329][ T3577] device veth1_vlan entered promiscuous mode [ 61.065479][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.081941][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.120197][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.128571][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.138385][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.147349][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.173550][ T3576] device veth0_macvtap entered promiscuous mode [ 61.186018][ T3576] device veth1_macvtap entered promiscuous mode [ 61.211031][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.212469][ T1077] Bluetooth: hci0: command 0x040f tx timeout [ 61.222053][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.237214][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.245980][ T1077] Bluetooth: hci1: command 0x040f tx timeout [ 61.254218][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.268019][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.276104][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.302178][ T1291] Bluetooth: hci4: command 0x040f tx timeout [ 61.308396][ T1291] Bluetooth: hci2: command 0x040f tx timeout [ 61.320307][ T1291] Bluetooth: hci3: command 0x040f tx timeout [ 61.328354][ T3576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.339348][ T3576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.353938][ T3576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.364591][ T3576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.376886][ T3576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.387593][ T3576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.399518][ T3576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.424039][ T1432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.427795][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.432689][ T1432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.468663][ T3577] device veth0_macvtap entered promiscuous mode [ 61.470182][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.490582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.501201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.510839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.519401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.527511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.537106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.546133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.572308][ T3577] device veth1_macvtap entered promiscuous mode [ 61.609891][ T3576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.631701][ T3576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.651576][ T3576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.663979][ T3644] loop3: detected capacity change from 0 to 1024 [ 61.664299][ T3576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.680868][ T3576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.692990][ T3576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.704428][ T3576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.729678][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.732105][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.740326][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.746538][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.760087][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.769152][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.780659][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.789551][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.801269][ T3577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.813547][ T3577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.824044][ T3577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.840749][ T3577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.851241][ T3577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.871244][ T3577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.885183][ T3577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.896447][ T3577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.908480][ T3577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.919802][ T3576] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.945266][ T3576] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.954831][ T3576] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.967817][ T3576] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.983912][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.000139][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.053251][ T3577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.081921][ T3647] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'. [ 62.086112][ T3577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.109828][ T3577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.120949][ T3577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.143308][ T3577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.162291][ T3577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.182708][ T3577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.193766][ T3577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.205944][ T3577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.228709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.264306][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.315560][ T3577] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.351351][ T3577] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.370333][ T3577] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.379292][ T3577] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.989500][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.003123][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.039159][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.058259][ T1327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.102548][ T1327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.122486][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.124169][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.155447][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.157372][ T3661] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.183660][ T3661] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.190006][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.234612][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.292258][ T3570] Bluetooth: hci1: command 0x0419 tx timeout [ 63.300822][ T3570] Bluetooth: hci0: command 0x0419 tx timeout [ 63.311715][ T13] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 63.375706][ T3642] Bluetooth: hci3: command 0x0419 tx timeout [ 63.391632][ T3642] Bluetooth: hci2: command 0x0419 tx timeout [ 63.397711][ T3642] Bluetooth: hci4: command 0x0419 tx timeout [ 63.525573][ T3663] loop0: detected capacity change from 0 to 2048 [ 63.533098][ T3667] loop4: detected capacity change from 0 to 512 [ 63.541847][ T13] usb 3-1: device descriptor read/64, error -71 [ 63.623746][ T3667] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 63.667504][ T3667] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 63.697927][ T3663] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 63.732836][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 63.793760][ T3667] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2815: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 63.814275][ T26] audit: type=1800 audit(1726996366.634:2): pid=3663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 63.839678][ T13] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 63.848089][ T3667] EXT4-fs (loop4): 1 truncate cleaned up [ 63.878406][ T3667] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,auto_da_alloc=0x0000000000000007,block_validity,quota,,errors=continue. Quota mode: writeback. [ 63.903482][ T26] audit: type=1800 audit(1726996366.724:3): pid=3663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 63.927682][ T3663] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 64.000905][ T3663] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2 with max blocks 30 with error 28 [ 64.067853][ T3663] EXT4-fs (loop0): This should not happen!! Data will be lost [ 64.067853][ T3663] [ 64.089348][ T3679] loop3: detected capacity change from 0 to 512 [ 64.124855][ T3663] EXT4-fs (loop0): Total free blocks count 0 [ 64.132731][ T3663] EXT4-fs (loop0): Free/Dirty block details [ 64.140626][ T3663] EXT4-fs (loop0): free_blocks=2415919104 [ 64.151485][ T13] usb 3-1: device descriptor read/64, error -71 [ 64.152379][ T3679] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 64.167874][ T3663] EXT4-fs (loop0): dirty_blocks=32 [ 64.174642][ T3663] EXT4-fs (loop0): Block reservation details [ 64.183975][ T3663] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 64.184298][ T3679] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 64.202234][ T3679] System zones: 0-2, 18-18, 34-35 [ 64.245893][ T3679] EXT4-fs (loop3): mounted filesystem without journal. Opts: lazytime,noinit_itable,debug,,errors=continue. Quota mode: writeback. [ 64.271596][ T13] usb usb3-port1: attempt power cycle [ 64.358600][ T3662] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 64.363252][ T3679] EXT4-fs (loop3): shut down requested (0) [ 64.394550][ T3662] EXT4-fs (loop0): This should not happen!! Data will be lost [ 64.394550][ T3662] [ 64.711496][ T13] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 64.836989][ T13] usb 3-1: device descriptor read/8, error -71 [ 64.875589][ T3703] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 65.026928][ T3707] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 65.131978][ T13] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 65.247650][ T13] usb 3-1: device descriptor read/8, error -71 [ 65.301039][ T3714] loop1: detected capacity change from 0 to 256 [ 65.384029][ T13] usb usb3-port1: unable to enumerate USB device [ 66.374650][ T26] audit: type=1400 audit(1726996369.194:4): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=3724 comm="syz.3.28" [ 66.871320][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 66.880509][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 66.889574][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 66.898696][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 66.907748][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 66.916868][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 66.928008][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 66.937045][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 66.946109][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 67.784415][ T3737] loop4: detected capacity change from 0 to 2048 [ 67.817837][ T3741] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 67.896512][ T3737] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 67.924155][ T26] audit: type=1800 audit(1726996370.744:5): pid=3737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.32" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 67.949611][ T3737] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 67.999851][ T26] audit: type=1804 audit(1726996370.814:6): pid=3714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.24" name="/newroot/syzcgroup/unified/syz1/file0" dev="loop1" ino=1048590 res=1 errno=0 [ 68.029215][ T3737] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2 with max blocks 30 with error 28 [ 68.056712][ T3737] EXT4-fs (loop4): This should not happen!! Data will be lost [ 68.056712][ T3737] [ 68.068904][ T3737] EXT4-fs (loop4): Total free blocks count 0 [ 68.075346][ T3737] EXT4-fs (loop4): Free/Dirty block details [ 68.081758][ T3737] EXT4-fs (loop4): free_blocks=2415919104 [ 68.087616][ T3737] EXT4-fs (loop4): dirty_blocks=32 [ 68.093661][ T3737] EXT4-fs (loop4): Block reservation details [ 68.100871][ T3737] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 68.148990][ T3755] loop0: detected capacity change from 0 to 1024 [ 68.155784][ T3751] syz.1.24[3751] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.171243][ T3755] ======================================================= [ 68.171243][ T3755] WARNING: The mand mount option has been deprecated and [ 68.171243][ T3755] and is ignored by this kernel. Remove the mand [ 68.171243][ T3755] option from the mount to silence this warning. [ 68.171243][ T3755] ======================================================= [ 68.275400][ T3755] EXT4-fs (loop0): Unrecognized mount option "rootcontext=staff_u" or missing value [ 68.407498][ T3760] loop3: detected capacity change from 0 to 256 [ 68.509332][ T3764] syz.0.40[3764] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.509432][ T3764] syz.0.40[3764] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.683746][ T3767] syz.1.42[3767] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.702922][ T3718] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 68.741263][ T3768] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 68.768908][ T3767] syz.1.42[3767] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.769496][ T3718] EXT4-fs (loop4): This should not happen!! Data will be lost [ 68.769496][ T3718] [ 68.841742][ T3771] Falling back ldisc for ttyS3. [ 69.004408][ T3775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.46'. [ 69.664328][ T3800] syz.1.56 uses obsolete (PF_INET,SOCK_PACKET) [ 69.957244][ T3805] Zero length message leads to an empty skb [ 70.138192][ T3815] usb usb1: usbfs: process 3815 (syz.4.62) did not claim interface 0 before use [ 70.156516][ T3813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.61'. [ 70.679681][ T3837] netlink: 'syz.3.73': attribute type 1 has an invalid length. [ 70.803806][ T3841] sg_write: data in/out 231/126 bytes for SCSI command 0x0-- guessing data in; [ 70.803806][ T3841] program syz.0.75 not setting count and/or reply_len properly [ 71.237882][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.197271][ T3838] loop4: detected capacity change from 0 to 512 [ 72.293714][ T3868] IPVS: Error connecting to the multicast addr [ 72.324398][ T3838] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 72.425830][ T3838] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.74: invalid indirect mapped block 4294967295 (level 0) [ 72.480359][ T3838] EXT4-fs (loop4): Remounting filesystem read-only [ 72.510969][ T3838] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.74: invalid indirect mapped block 4294967295 (level 1) [ 72.558517][ T3838] EXT4-fs (loop4): 1 orphan inode deleted [ 72.575895][ T3838] EXT4-fs (loop4): 1 truncate cleaned up [ 72.595976][ T3838] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,lazytime,debug_want_extra_isize=0x000000000000006e,block_validity,block_validity,quota,. Quota mode: writeback. [ 73.112641][ T3888] netlink: 40 bytes leftover after parsing attributes in process `syz.0.90'. [ 73.851479][ T3645] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 74.118361][ T3905] loop3: detected capacity change from 0 to 1024 [ 74.199053][ T3909] loop0: detected capacity change from 0 to 512 [ 74.234505][ T3905] EXT4-fs (loop3): error: journal path ./file0 is not a block device [ 74.271785][ T3645] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 74.300877][ T3645] usb 2-1: config 1 has an invalid descriptor of length 170, skipping remainder of the config [ 74.321381][ T3645] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 74.351463][ T3645] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 74.368978][ T3909] EXT4-fs (loop0): Ignoring removed oldalloc option [ 74.434633][ T3909] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.98: Parent and EA inode have the same ino 15 [ 74.521620][ T3912] netlink: 28 bytes leftover after parsing attributes in process `syz.3.99'. [ 74.551684][ T3909] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.98: Parent and EA inode have the same ino 15 [ 74.584037][ T3909] EXT4-fs (loop0): 1 orphan inode deleted [ 74.589813][ T3909] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,bsdgroups,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 74.853878][ T26] audit: type=1326 audit(1726996377.674:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3916 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4385287ef9 code=0x7ffc0000 [ 74.899757][ T26] audit: type=1326 audit(1726996377.674:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3916 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f4385287ef9 code=0x7ffc0000 [ 74.946193][ T26] audit: type=1326 audit(1726996377.674:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3916 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4385287ef9 code=0x7ffc0000 [ 74.991514][ T3919] ------------[ cut here ]------------ [ 75.001446][ T3919] WARNING: CPU: 0 PID: 3919 at net/wireless/core.h:220 cfg80211_wireless_stats+0x57d/0x660 [ 75.032323][ T3919] Modules linked in: [ 75.041141][ T3919] CPU: 0 PID: 3919 Comm: syz.0.102 Not tainted 5.15.167-syzkaller #0 [ 75.080030][ T3919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 75.129190][ T3919] RIP: 0010:cfg80211_wireless_stats+0x57d/0x660 [ 75.152846][ T3919] Code: 00 00 65 48 8b 0c 25 28 00 00 00 48 3b 4c 24 60 0f 85 e7 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 73 81 c5 f7 <0f> 0b e9 3c fc ff ff e8 67 81 c5 f7 0f 0b e9 81 fd ff ff e8 5b 81 [ 75.225458][ T3919] RSP: 0018:ffffc900030d7880 EFLAGS: 00010287 [ 75.246529][ T3919] RAX: ffffffff89bad8fd RBX: 0000000000000000 RCX: 0000000000040000 [ 75.274949][ T3919] RDX: ffffc9000390c000 RSI: 0000000000001c4a RDI: 0000000000001c4b [ 75.302283][ T3919] RBP: ffffc900030d7930 R08: ffffffff89bad500 R09: fffff5200061aef5 [ 75.329530][ T3919] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888147aa4000 [ 75.357102][ T3919] R13: ffff888074e1c000 R14: 1ffff1100e9c3800 R15: ffff888147aa45c0 [ 75.395511][ T3919] FS: 00007f43837006c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 75.433759][ T3919] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.441596][ T3919] CR2: 00007f43836dfd58 CR3: 0000000049599000 CR4: 00000000003506f0 [ 75.458996][ T3919] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 75.485178][ T3919] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 75.510586][ T3919] Call Trace: [ 75.519950][ T3919] [ 75.544859][ T3919] ? __warn+0x15b/0x300 [ 75.549094][ T3919] ? cfg80211_wireless_stats+0x57d/0x660 [ 75.597759][ T3919] ? report_bug+0x1b7/0x2e0 [ 75.604456][ T3919] ? handle_bug+0x3d/0x70 [ 75.608834][ T3919] ? exc_invalid_op+0x16/0x40 [ 75.615494][ T3919] ? asm_exc_invalid_op+0x16/0x20 [ 75.620581][ T3919] ? cfg80211_wireless_stats+0x180/0x660 [ 75.633800][ T3919] ? cfg80211_wireless_stats+0x57d/0x660 [ 75.639578][ T3919] ? cfg80211_wireless_stats+0x57d/0x660 [ 75.649345][ T3919] ? cfg80211_wext_giwretry+0x360/0x360 [ 75.657919][ T3919] ? mutex_lock_io_nested+0x60/0x60 [ 75.667157][ T3919] wireless_dev_seq_show+0x49/0x4a0 [ 75.675346][ T3919] ? mutex_lock_nested+0x17/0x20 [ 75.680412][ T3919] seq_read_iter+0x43a/0xd10 [ 75.689297][ T3919] seq_read+0x452/0x5c0 [ 75.699171][ T3919] ? aa_path_link+0xea0/0xea0 [ 75.707997][ T3919] ? seq_open+0x140/0x140 [ 75.716567][ T3919] ? __mutex_lock_common+0x444/0x25a0 [ 75.726996][ T3919] ? __might_fault+0xb4/0x110 [ 75.734479][ T3919] ? _copy_from_user+0x10f/0x170 [ 75.739519][ T3919] ? iov_iter_advance+0x1f8/0x380 [ 75.748679][ T3919] ? seq_open+0x140/0x140 [ 75.755777][ T3919] proc_reg_read+0x1f9/0x2e0 [ 75.760481][ T3919] do_iter_read+0x4c6/0x760 [ 75.769219][ T3919] do_readv+0x271/0x460 [ 75.776164][ T3919] ? do_iter_readv_writev+0x7a0/0x7a0 [ 75.785384][ T3919] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 75.794091][ T3919] ? vtime_user_exit+0x2d1/0x400 [ 75.800608][ T3919] ? syscall_enter_from_user_mode+0x2e/0x240 [ 75.811443][ T3919] ? lockdep_hardirqs_on+0x94/0x130 [ 75.819127][ T3919] ? syscall_enter_from_user_mode+0x2e/0x240 [ 75.833435][ T3919] do_syscall_64+0x3b/0xb0 [ 75.846019][ T3919] ? clear_bhb_loop+0x15/0x70 [ 75.859435][ T3919] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 75.885786][ T3919] RIP: 0033:0x7f4385287ef9 [ 75.890734][ T3919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.915404][ T3919] RSP: 002b:00007f4383700038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 75.924734][ T3919] RAX: ffffffffffffffda RBX: 00007f438543ff80 RCX: 00007f4385287ef9 [ 75.933310][ T3919] RDX: 0000000000000002 RSI: 00000000200008c0 RDI: 0000000000000007 [ 75.942101][ T3919] RBP: 00007f43852fab76 R08: 0000000000000000 R09: 0000000000000000 [ 75.950346][ T3919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.959332][ T3919] R13: 0000000000000000 R14: 00007f438543ff80 R15: 00007fffec0eef88 [ 75.967782][ T3919] [ 75.971233][ T3919] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 75.978649][ T3919] CPU: 0 PID: 3919 Comm: syz.0.102 Not tainted 5.15.167-syzkaller #0 [ 75.986819][ T3919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 75.996887][ T3919] Call Trace: [ 76.000264][ T3919] [ 76.003208][ T3919] dump_stack_lvl+0x1e3/0x2d0 [ 76.007912][ T3919] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 76.013568][ T3919] ? panic+0x860/0x860 [ 76.017774][ T3919] ? cfg80211_wireless_stats+0x480/0x660 [ 76.023435][ T3919] ? cfg80211_wireless_stats+0x480/0x660 [ 76.029094][ T3919] panic+0x318/0x860 [ 76.033024][ T3919] ? __warn+0x16a/0x300 [ 76.037198][ T3919] ? fb_is_primary_device+0xd0/0xd0 [ 76.042434][ T3919] ? cfg80211_wireless_stats+0x57d/0x660 [ 76.048175][ T3919] __warn+0x2b2/0x300 [ 76.052179][ T3919] ? cfg80211_wireless_stats+0x57d/0x660 [ 76.057838][ T3919] report_bug+0x1b7/0x2e0 [ 76.062192][ T3919] handle_bug+0x3d/0x70 [ 76.066366][ T3919] exc_invalid_op+0x16/0x40 [ 76.070883][ T3919] asm_exc_invalid_op+0x16/0x20 [ 76.075748][ T3919] RIP: 0010:cfg80211_wireless_stats+0x57d/0x660 [ 76.082006][ T3919] Code: 00 00 65 48 8b 0c 25 28 00 00 00 48 3b 4c 24 60 0f 85 e7 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 73 81 c5 f7 <0f> 0b e9 3c fc ff ff e8 67 81 c5 f7 0f 0b e9 81 fd ff ff e8 5b 81 [ 76.101629][ T3919] RSP: 0018:ffffc900030d7880 EFLAGS: 00010287 [ 76.107726][ T3919] RAX: ffffffff89bad8fd RBX: 0000000000000000 RCX: 0000000000040000 [ 76.115712][ T3919] RDX: ffffc9000390c000 RSI: 0000000000001c4a RDI: 0000000000001c4b [ 76.123699][ T3919] RBP: ffffc900030d7930 R08: ffffffff89bad500 R09: fffff5200061aef5 [ 76.131689][ T3919] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888147aa4000 [ 76.139681][ T3919] R13: ffff888074e1c000 R14: 1ffff1100e9c3800 R15: ffff888147aa45c0 [ 76.147848][ T3919] ? cfg80211_wireless_stats+0x180/0x660 [ 76.153515][ T3919] ? cfg80211_wireless_stats+0x57d/0x660 [ 76.159179][ T3919] ? cfg80211_wext_giwretry+0x360/0x360 [ 76.164755][ T3919] ? mutex_lock_io_nested+0x60/0x60 [ 76.170041][ T3919] wireless_dev_seq_show+0x49/0x4a0 [ 76.175264][ T3919] ? mutex_lock_nested+0x17/0x20 [ 76.180254][ T3919] seq_read_iter+0x43a/0xd10 [ 76.184886][ T3919] seq_read+0x452/0x5c0 [ 76.189054][ T3919] ? aa_path_link+0xea0/0xea0 [ 76.193754][ T3919] ? seq_open+0x140/0x140 [ 76.198100][ T3919] ? __mutex_lock_common+0x444/0x25a0 [ 76.203491][ T3919] ? __might_fault+0xb4/0x110 [ 76.208195][ T3919] ? _copy_from_user+0x10f/0x170 [ 76.213150][ T3919] ? iov_iter_advance+0x1f8/0x380 [ 76.218202][ T3919] ? seq_open+0x140/0x140 [ 76.222546][ T3919] proc_reg_read+0x1f9/0x2e0 [ 76.227163][ T3919] do_iter_read+0x4c6/0x760 [ 76.231698][ T3919] do_readv+0x271/0x460 [ 76.235888][ T3919] ? do_iter_readv_writev+0x7a0/0x7a0 [ 76.241299][ T3919] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 76.247308][ T3919] ? vtime_user_exit+0x2d1/0x400 [ 76.252277][ T3919] ? syscall_enter_from_user_mode+0x2e/0x240 [ 76.258287][ T3919] ? lockdep_hardirqs_on+0x94/0x130 [ 76.263508][ T3919] ? syscall_enter_from_user_mode+0x2e/0x240 [ 76.269510][ T3919] do_syscall_64+0x3b/0xb0 [ 76.273946][ T3919] ? clear_bhb_loop+0x15/0x70 [ 76.278635][ T3919] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.284548][ T3919] RIP: 0033:0x7f4385287ef9 [ 76.289094][ T3919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.308806][ T3919] RSP: 002b:00007f4383700038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 76.317249][ T3919] RAX: ffffffffffffffda RBX: 00007f438543ff80 RCX: 00007f4385287ef9 [ 76.325246][ T3919] RDX: 0000000000000002 RSI: 00000000200008c0 RDI: 0000000000000007 [ 76.333243][ T3919] RBP: 00007f43852fab76 R08: 0000000000000000 R09: 0000000000000000 [ 76.341277][ T3919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.349378][ T3919] R13: 0000000000000000 R14: 00007f438543ff80 R15: 00007fffec0eef88 [ 76.357387][ T3919] [ 76.360505][ T3919] Kernel Offset: disabled [ 76.365034][ T3919] Rebooting in 86400 seconds..