last executing test programs: 19.606092909s ago: executing program 2 (id=23): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r1, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x2b, 0x65, 0x66, 0x200, 0x0, @mcast2, @ipv4={'\x00', '\xff\xff', @local}, 0x10, 0x700, 0x100, 0x70}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x1000, 0x7, 0x735046e8, 0x8800, 0xffffffffffffffff, 0xa801, '\x00', r2, 0xffffffffffffffff, 0x4, 0x4, 0x2, 0x9, @value=r0, @void, @void, @value}, 0xfffffffffffffc62) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) sendto$inet(r1, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 16.515976774s ago: executing program 2 (id=33): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47a57f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc8a62ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e789b76f7d32aca1bfea2aa62621b78dded30fc07171866bf3d552900000000a32dda61eeda1750e157c2d569b9d08f583c0ee28daec2e8bb85f3c8e91c4448096ee953def18dc73e55cb30f9cd069d8780b00eaba382f0c3ae391c30a5f1b0f36dd0c2193b791995d2890327a10d7abac76d1202f72e97f0105184d7aaaab8d3e29c9a8d263f076b55cf53c5bb9c0662a3d19a6722d7f83ae4331d3256f90af0857788b380ccc3b266c418e66d1d756d5df6423dd0cea67bc235d3776d22270fc19301ead09f156893e9"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 16.361301644s ago: executing program 2 (id=35): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$uac1(0x0, 0xa8, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000106b1d0101400001020301090296000301fe00000904000000010100000a240100000002010213240600fc06000000000600000000000000000924070a0100a4c10609240704030005fd92092403000703000403092406060201090006090401eeff0002000009040101"], 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000200)={0x0, 0x3, 0x6, @multicast}, 0x10) wait4(0x0, 0x0, 0x80000008, 0x0) 13.271778669s ago: executing program 0 (id=36): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0xc01, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00', r3}, 0x10) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x5000) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_LSEEK(r0, &(0x7f00000021c0)={0x18, 0x0, r4, {0x7}}, 0x18) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r0, &(0x7f0000002140)={0x20, 0x0, r5, {0x0, 0x0, 0x80003ff}}, 0x20) read$FUSE(r0, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) getdents64(r1, 0x0, 0x300) write$FUSE_INTERRUPT(r0, &(0x7f0000002180)={0x10, 0x0, r6}, 0x10) 11.938271835s ago: executing program 2 (id=41): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f00000003c0)='./file0/../file0/../file0/../file0\x00') 11.936704455s ago: executing program 0 (id=42): r0 = socket(0x10, 0x3, 0x9) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000200)={[{@journal_dev}, {@nouid32}]}, 0xfe, 0x269, &(0x7f0000000780)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x4, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x9, 0x100000000002}], ['\x00', '\x00', '\x00', '\x00']}) 11.743921406s ago: executing program 2 (id=45): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8", 0x0, 0x1200, 0x0, 0x2a, 0x0, &(0x7f00000002c0)="76a1f6c458cf7c3b00e7f027572255aa9e8ad1124e3060fdbf899ae111efa1f3e0d2eb438487f2790d88", 0x0}, 0x50) 11.645721116s ago: executing program 2 (id=47): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, 0x0) syz_open_procfs(r0, &(0x7f0000000180)='gid_map\x00') 11.584007367s ago: executing program 0 (id=48): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) mount(0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) inotify_init1(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xfffffffffffffffe, 0x0, {{0x7, 0x1, 0x5, 0x6, 0x5, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0xd615, 0x5, 0x800001, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3fc, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x7f03) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x210, 0x210, 0x138, 0x0, 0x210, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'gretap0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000900)={0xb4, r8, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0xa0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x800}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x81b}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc0}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xdc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf9}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x462}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000011}, 0x1) 9.220694358s ago: executing program 0 (id=52): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) 6.42611034s ago: executing program 1 (id=63): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x21, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0xe, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r4, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r4, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r5, 0x11b, 0x7, 0x0, &(0x7f0000000000)) 5.546225705s ago: executing program 0 (id=71): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f8) lseek(r0, 0xf00, 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r2}, 0x18) r3 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7"], 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000006000000b70300000000a9998500000004000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) syz_usb_disconnect(r3) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r6], 0x4c}}, 0x0) 3.649984304s ago: executing program 4 (id=79): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x181341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x22) 3.422010284s ago: executing program 4 (id=81): syz_mount_image$ext4(0x0, &(0x7f00000004c0)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r4 = dup(r1) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="9802"], 0x298) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}}) 3.240321986s ago: executing program 1 (id=83): socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@nfs_export_off}], [], 0x2c}) 3.239972865s ago: executing program 4 (id=84): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000000000000000181100", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) linkat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) 3.201535056s ago: executing program 3 (id=85): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x8001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000500)={'gre0\x00', 0x0}) 2.996642577s ago: executing program 1 (id=86): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000011c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={0x0, r0}, 0x18) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x7, 0x208b}, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, 0x0, &(0x7f00000005c0)}, 0x20) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) 2.104114261s ago: executing program 4 (id=87): pipe2$watch_queue(0x0, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x678, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 2.096730921s ago: executing program 3 (id=88): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x6fc) 2.082419261s ago: executing program 1 (id=89): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) inotify_add_watch(0xffffffffffffffff, 0x0, 0x80000010) 1.956186101s ago: executing program 0 (id=90): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_setup(0x3, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/13, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 1.932087231s ago: executing program 3 (id=91): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x181341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x22) 1.909039352s ago: executing program 1 (id=92): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000f1ff007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) shutdown(0xffffffffffffffff, 0x1) sigaltstack(0x0, 0x0) 952.222806ms ago: executing program 4 (id=93): socket(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000005a00), 0x1, 0x42f, &(0x7f0000000940)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) unshare(0x2000680) 899.248056ms ago: executing program 1 (id=94): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) io_setup(0x3, &(0x7f00000003c0)=0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r7, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x44a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180d, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) truncate(&(0x7f00000001c0)='./file0\x00', 0x4) unshare(0x40600) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 818.135226ms ago: executing program 3 (id=95): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000006c0)={'lo\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f00000001c0)={0x11, 0x0, r1, 0x1, 0xff, 0x6, @link_local}, 0x14) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) 464.256548ms ago: executing program 3 (id=96): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x97, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) 686.66µs ago: executing program 4 (id=97): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f00000008c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=107): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x885, 0x0) ioctl$BLKBSZGET(r0, 0x80081270, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.165' (ED25519) to the list of known hosts. [ 37.308993][ T4012] cgroup: Unknown subsys name 'net' [ 37.544998][ T4012] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 37.923115][ T4012] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 40.057627][ T4031] chnl_net:caif_netlink_parms(): no params data found [ 40.074924][ T4023] chnl_net:caif_netlink_parms(): no params data found [ 40.117875][ T4036] chnl_net:caif_netlink_parms(): no params data found [ 40.148156][ T4027] chnl_net:caif_netlink_parms(): no params data found [ 40.233735][ T4023] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.235449][ T4023] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.237721][ T4023] device bridge_slave_0 entered promiscuous mode [ 40.251479][ T4037] chnl_net:caif_netlink_parms(): no params data found [ 40.254934][ T4027] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.256476][ T4027] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.259231][ T4027] device bridge_slave_0 entered promiscuous mode [ 40.261825][ T4031] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.263507][ T4031] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.266099][ T4031] device bridge_slave_0 entered promiscuous mode [ 40.275747][ T4036] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.277350][ T4036] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.279712][ T4036] device bridge_slave_0 entered promiscuous mode [ 40.282785][ T4036] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.284405][ T4036] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.286546][ T4036] device bridge_slave_1 entered promiscuous mode [ 40.289031][ T4023] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.290555][ T4023] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.292948][ T4023] device bridge_slave_1 entered promiscuous mode [ 40.297651][ T4027] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.299925][ T4027] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.302174][ T4027] device bridge_slave_1 entered promiscuous mode [ 40.304363][ T4031] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.306000][ T4031] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.309112][ T4031] device bridge_slave_1 entered promiscuous mode [ 40.373816][ T4023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.383260][ T4027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.387215][ T4031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.392490][ T4036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.399261][ T4036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.403052][ T4023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.406596][ T4027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.415646][ T4031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.467175][ T4027] team0: Port device team_slave_0 added [ 40.471353][ T4031] team0: Port device team_slave_0 added [ 40.474693][ T4036] team0: Port device team_slave_0 added [ 40.482217][ T4037] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.483761][ T4037] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.486106][ T4037] device bridge_slave_0 entered promiscuous mode [ 40.491186][ T4023] team0: Port device team_slave_0 added [ 40.493787][ T4027] team0: Port device team_slave_1 added [ 40.497260][ T4023] team0: Port device team_slave_1 added [ 40.500096][ T4031] team0: Port device team_slave_1 added [ 40.508152][ T4036] team0: Port device team_slave_1 added [ 40.509795][ T4037] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.511349][ T4037] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.513563][ T4037] device bridge_slave_1 entered promiscuous mode [ 40.560883][ T4031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.562357][ T4031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.567810][ T4031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.581909][ T4027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.583497][ T4027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.589373][ T4027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.592736][ T4023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.594272][ T4023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.600030][ T4023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.603276][ T4031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.604863][ T4031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.611104][ T4031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.617245][ T4036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.619209][ T4036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.624696][ T4036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.630380][ T4037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.632806][ T4027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.634236][ T4027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.640155][ T4027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.643478][ T4023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.644942][ T4023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.656811][ T4023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.663688][ T4036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.665243][ T4036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.670938][ T4036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.675048][ T4037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.728592][ T4037] team0: Port device team_slave_0 added [ 40.731746][ T4037] team0: Port device team_slave_1 added [ 40.810162][ T4036] device hsr_slave_0 entered promiscuous mode [ 40.858536][ T4036] device hsr_slave_1 entered promiscuous mode [ 40.959938][ T4031] device hsr_slave_0 entered promiscuous mode [ 40.998256][ T4031] device hsr_slave_1 entered promiscuous mode [ 41.038089][ T4031] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.039902][ T4031] Cannot create hsr debugfs directory [ 41.080443][ T4023] device hsr_slave_0 entered promiscuous mode [ 41.128309][ T4023] device hsr_slave_1 entered promiscuous mode [ 41.168071][ T4023] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.169786][ T4023] Cannot create hsr debugfs directory [ 41.199985][ T4027] device hsr_slave_0 entered promiscuous mode [ 41.248332][ T4027] device hsr_slave_1 entered promiscuous mode [ 41.298077][ T4027] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.299842][ T4027] Cannot create hsr debugfs directory [ 41.301555][ T4037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.302967][ T4037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.308609][ T4037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.349248][ T4037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.350783][ T4037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.356257][ T4037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.500211][ T4037] device hsr_slave_0 entered promiscuous mode [ 41.538212][ T4037] device hsr_slave_1 entered promiscuous mode [ 41.578196][ T4037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.579928][ T4037] Cannot create hsr debugfs directory [ 41.761131][ T4036] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 41.798581][ T4014] Bluetooth: hci3: command 0x0409 tx timeout [ 41.798815][ T4033] Bluetooth: hci2: command 0x0409 tx timeout [ 41.801320][ T4033] Bluetooth: hci1: command 0x0409 tx timeout [ 41.802563][ T4033] Bluetooth: hci0: command 0x0409 tx timeout [ 41.820087][ T4036] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 41.873017][ T4036] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 41.878279][ T1961] Bluetooth: hci4: command 0x0409 tx timeout [ 41.911285][ T4036] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 42.004669][ T4031] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 42.025613][ T4031] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 42.060086][ T4031] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 42.120364][ T4031] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 42.170190][ T4023] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 42.217149][ T4023] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 42.265808][ T4023] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 42.313236][ T4023] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 42.374641][ T4036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.412779][ T4027] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 42.450264][ T4027] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 42.502082][ T4027] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 42.555828][ T4027] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 42.603382][ T4036] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.605102][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.609142][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.628763][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.631004][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.633391][ T1862] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.635013][ T1862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.637359][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 42.643142][ T4037] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 42.676308][ T4037] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 42.712883][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.715425][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.717491][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.719158][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.729808][ T4037] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 42.773383][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 42.783349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 42.786040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 42.789865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.792328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 42.796138][ T4037] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 42.853577][ T4031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.858604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 42.861429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.864234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 42.866735][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.881926][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 42.884505][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.902374][ T4036] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 42.923027][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.925229][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.939511][ T4031] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.975915][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.978815][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.981244][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.982872][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.986996][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.001647][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.004843][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.006882][ T1599] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.008487][ T1599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.013195][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.027475][ T4023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.053291][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.055419][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.062764][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.075896][ T4023] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.085160][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.089319][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.091692][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.098592][ T4027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.101344][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.105036][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.107239][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.108895][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.127644][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.130232][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 43.131949][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 43.133641][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.135880][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.138363][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.140025][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.142156][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.149924][ T4036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.162594][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.166105][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.168905][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.171307][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.173416][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.191022][ T4027] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.192949][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.195193][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.197463][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.202763][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.205305][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.211144][ T4037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.220747][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.223063][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.225382][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.227838][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.254246][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 43.257443][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.260922][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.263098][ T1862] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.264585][ T1862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.267527][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.271090][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.273341][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.282131][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 43.284438][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.286586][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.290185][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.305355][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.307434][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.310390][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.312663][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.314662][ T1599] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.316128][ T1599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.328950][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.331859][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.346444][ T4023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 43.352423][ T4037] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.364916][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.367782][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.370325][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.372737][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.379164][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.380785][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.382805][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 43.384990][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.410333][ T4036] device veth0_vlan entered promiscuous mode [ 43.417876][ T4036] device veth1_vlan entered promiscuous mode [ 43.425177][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.427447][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.431348][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.434596][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.436726][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 43.439685][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.442327][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.444657][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.446878][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.450585][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.452854][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.454877][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.456445][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.484638][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.487215][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.491326][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.494263][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.497236][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.500660][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.502950][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 43.504717][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 43.506469][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.513646][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.515930][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.527117][ T4027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 43.541249][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.543556][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.545961][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 43.548885][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.555799][ T4031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.563384][ T4036] device veth0_macvtap entered promiscuous mode [ 43.573493][ T4037] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.576442][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 43.594405][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 43.596765][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.606929][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.609883][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 43.612201][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.614452][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 43.616126][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 43.626076][ T4036] device veth1_macvtap entered promiscuous mode [ 43.647608][ T4023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.676659][ T4036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.683573][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 43.685749][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.689244][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.707017][ T4036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.711930][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 43.714313][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.717050][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 43.723804][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 43.725549][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.730963][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.741505][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.743650][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.754719][ T4031] device veth0_vlan entered promiscuous mode [ 43.759276][ T4036] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.761271][ T4036] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.763145][ T4036] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.765014][ T4036] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.777157][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 43.779703][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 43.786342][ T4027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.802793][ T4031] device veth1_vlan entered promiscuous mode [ 43.806310][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 43.810381][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 43.812701][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.830037][ T4037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.878770][ T4076] Bluetooth: hci0: command 0x041b tx timeout [ 43.886300][ T4076] Bluetooth: hci1: command 0x041b tx timeout [ 43.887653][ T4076] Bluetooth: hci2: command 0x041b tx timeout [ 43.889115][ T4076] Bluetooth: hci3: command 0x041b tx timeout [ 43.911906][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 43.914161][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 43.916328][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.927788][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.930375][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.940225][ T4023] device veth0_vlan entered promiscuous mode [ 43.945995][ T1599] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.947795][ T1599] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.951056][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.957878][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 43.960450][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.963119][ T4076] Bluetooth: hci4: command 0x041b tx timeout [ 43.972315][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 43.974671][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.995551][ T4023] device veth1_vlan entered promiscuous mode [ 43.999466][ T4031] device veth0_macvtap entered promiscuous mode [ 44.003480][ T4031] device veth1_macvtap entered promiscuous mode [ 44.015452][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 44.017822][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 44.021603][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 44.023901][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.026237][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.045535][ T1862] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.047603][ T1862] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.061148][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 44.063361][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 44.065486][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.067644][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.073663][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.076046][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.081041][ T4027] device veth0_vlan entered promiscuous mode [ 44.083147][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.085324][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.087416][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.095866][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.099005][ T4037] device veth0_vlan entered promiscuous mode [ 44.101882][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.104283][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.107738][ T4031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.127716][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.130457][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.143074][ T4027] device veth1_vlan entered promiscuous mode [ 44.147320][ T4037] device veth1_vlan entered promiscuous mode [ 44.156541][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.160241][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.163486][ T4031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.171597][ T4031] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.173765][ T4031] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.175610][ T4031] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.177523][ T4031] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.181884][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 44.184082][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 44.186186][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 44.189023][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.191363][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.220318][ T4023] device veth0_macvtap entered promiscuous mode [ 44.223366][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 44.225689][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.235563][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.241958][ T4102] udc-core: couldn't find an available UDC or it's busy [ 44.243513][ T4102] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 44.254058][ T4023] device veth1_macvtap entered promiscuous mode [ 44.262994][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 44.265120][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 44.276233][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.280739][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.292896][ T4037] device veth0_macvtap entered promiscuous mode [ 44.298971][ T4037] device veth1_macvtap entered promiscuous mode [ 44.306311][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 44.308597][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 44.310695][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.312972][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.321753][ T4027] device veth0_macvtap entered promiscuous mode [ 44.326997][ T4027] device veth1_macvtap entered promiscuous mode [ 44.340887][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.343522][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.345718][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.348534][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.351877][ T4023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.357279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 44.359785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 44.361910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.365289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.378811][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.381150][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.383278][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.385617][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.387794][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.392148][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.395744][ T4037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.400956][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.403279][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.410532][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.412850][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.414928][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.417637][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.421667][ T4023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.435464][ T4023] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.437440][ T4023] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.439878][ T4023] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.441819][ T4023] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.455221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.457591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.477454][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.480881][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.483095][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.485402][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.487743][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.490711][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.492831][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.495162][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.499511][ T4027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.502638][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.504825][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.506908][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.510972][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.513053][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.515194][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.518680][ T4037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.530377][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.533607][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.535897][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.538769][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.549393][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.551611][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.553670][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.555981][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.559884][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.562181][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.564275][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.566518][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.572200][ T4027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.577097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.580274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.583165][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.585002][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.587344][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 44.621131][ T4037] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.623158][ T4037] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.625320][ T4037] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.627158][ T4037] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.631320][ T4027] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.633192][ T4027] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.635036][ T4027] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.636950][ T4027] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.677804][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.680447][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.683072][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 44.717779][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.720123][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.752122][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 44.832584][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.834373][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.839163][ T1599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.839404][ T4106] udc-core: couldn't find an available UDC or it's busy [ 44.841035][ T1599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.842500][ T4106] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 44.853393][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 44.859113][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 44.937156][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.947067][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.951876][ T1599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.953702][ T1599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.955942][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 44.963208][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 44.982163][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.984007][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.986377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 45.146160][ T4113] loop4: detected capacity change from 0 to 512 [ 45.211437][ T4111] device vlan1 entered promiscuous mode [ 45.233275][ T4113] EXT4-fs (loop4): Ignoring removed bh option [ 45.234565][ T4113] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 45.234565][ T4113] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 45.234565][ T4113] [ 45.242991][ T4113] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 46.174237][ T4071] Bluetooth: hci3: command 0x040f tx timeout [ 46.175730][ T4071] Bluetooth: hci2: command 0x040f tx timeout [ 46.179518][ T4071] Bluetooth: hci1: command 0x040f tx timeout [ 46.181000][ T4071] Bluetooth: hci0: command 0x040f tx timeout [ 46.182356][ T4071] Bluetooth: hci4: command 0x040f tx timeout [ 46.235320][ T4113] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #3: comm syz.4.5: corrupted inode contents [ 46.241018][ T4113] EXT4-fs error (device loop4): ext4_dirty_inode:6010: inode #3: comm syz.4.5: mark_inode_dirty error [ 46.359198][ T26] audit: type=1326 audit(46.290:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4118 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa12ce368 code=0x7ffc0000 [ 46.366394][ T26] audit: type=1326 audit(46.290:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4118 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa12ce368 code=0x7ffc0000 [ 46.508340][ T26] audit: type=1326 audit(46.290:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4118 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=424 compat=0 ip=0xffffa12ce368 code=0x7ffc0000 [ 47.268663][ T4113] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #3: comm syz.4.5: corrupted inode contents [ 47.273541][ T26] audit: type=1326 audit(46.300:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4118 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa12ce368 code=0x7ffc0000 [ 47.288231][ T4113] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #3: comm syz.4.5: mark_inode_dirty error [ 47.295775][ T26] audit: type=1326 audit(46.300:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4118 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa12ce368 code=0x7ffc0000 [ 47.308386][ T26] audit: type=1326 audit(46.300:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4118 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffa13c187c code=0x7ffc0000 [ 47.308808][ T4113] Quota error (device loop4): write_blk: dquota write failed [ 47.313217][ T26] audit: type=1326 audit(46.300:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4118 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa12ce368 code=0x7ffc0000 [ 47.318114][ T4113] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 47.328496][ T4111] device vlan1 left promiscuous mode [ 47.348171][ T4113] EXT4-fs error (device loop4): ext4_acquire_dquot:6197: comm syz.4.5: Failed to acquire dquot type 0 [ 47.368162][ T26] audit: type=1326 audit(46.300:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4118 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa12ce368 code=0x7ffc0000 [ 47.401237][ T4113] EXT4-fs (loop4): 1 orphan inode deleted [ 47.402501][ T4113] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_dev=0x000000000000000a,bh,nouser_xattr,sb=0x00000000000006cc,nouid32,data_err=abort,nombcache,,errors=continue. Quota mode: writeback. [ 47.798151][ T4140] xt_CT: You must specify a L4 protocol and not use inversions on it [ 48.461335][ T4076] Bluetooth: hci4: command 0x0419 tx timeout [ 48.934391][ T4076] Bluetooth: hci0: command 0x0419 tx timeout [ 48.947678][ T4076] Bluetooth: hci1: command 0x0419 tx timeout [ 49.518012][ T4076] Bluetooth: hci2: command 0x0419 tx timeout [ 49.519380][ T4076] Bluetooth: hci3: command 0x0419 tx timeout [ 49.646375][ T4151] capability: warning: `syz.0.16' uses deprecated v2 capabilities in a way that may be insecure [ 50.784537][ T4158] loop2: detected capacity change from 0 to 256 [ 51.984942][ T4158] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 53.186200][ T4165] netlink: 'syz.1.18': attribute type 4 has an invalid length. [ 54.625822][ T4171] udc-core: couldn't find an available UDC or it's busy [ 54.627374][ T4171] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 54.760411][ T4175] udc-core: couldn't find an available UDC or it's busy [ 54.763266][ T4175] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 54.910519][ T4179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.24'. [ 55.015643][ T148] tipc: Subscription rejected, illegal request [ 56.999444][ T4200] Illegal XDP return value 4294967274, expect packet loss! [ 58.995120][ T4208] sched: RT throttling activated [ 60.120605][ T4204] netlink: 'syz.4.30': attribute type 4 has an invalid length. [ 61.035927][ T4219] udc-core: couldn't find an available UDC or it's busy [ 61.037747][ T4219] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 61.060252][ T4215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.32'. [ 61.486135][ T4230] loop3: detected capacity change from 0 to 256 [ 62.458649][ T4230] ======================================================= [ 62.458649][ T4230] WARNING: The mand mount option has been deprecated and [ 62.458649][ T4230] and is ignored by this kernel. Remove the mand [ 62.458649][ T4230] option from the mount to silence this warning. [ 62.458649][ T4230] ======================================================= [ 62.470327][ T4231] netlink: 16 bytes leftover after parsing attributes in process `syz.1.37'. [ 62.533243][ T4230] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 62.663466][ T4236] loop0: detected capacity change from 0 to 128 [ 62.708961][ T4236] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,nouid32,,errors=continue. Quota mode: none. [ 62.803930][ T4238] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 62.806857][ T4238] device syzkaller0 entered promiscuous mode [ 63.930981][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 63.930993][ T26] audit: type=1326 audit(63.890:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4251 comm="syz.0.48" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaed1e368 code=0x7ffc0000 [ 63.964082][ T26] audit: type=1326 audit(63.920:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4251 comm="syz.0.48" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffaed1e368 code=0x7ffc0000 [ 63.978133][ T26] audit: type=1326 audit(63.930:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4251 comm="syz.0.48" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaed1e368 code=0x7ffc0000 [ 64.003116][ T26] audit: type=1326 audit(63.930:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4251 comm="syz.0.48" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaed1e368 code=0x7ffc0000 [ 64.019404][ T26] audit: type=1326 audit(63.930:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4251 comm="syz.0.48" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffaed1e368 code=0x7ffc0000 [ 64.054940][ T26] audit: type=1326 audit(63.930:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4251 comm="syz.0.48" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaed1e368 code=0x7ffc0000 [ 64.075191][ T26] audit: type=1326 audit(63.930:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4251 comm="syz.0.48" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaed1e368 code=0x7ffc0000 [ 64.084883][ T4223] loop4: detected capacity change from 0 to 40427 [ 64.098075][ T26] audit: type=1326 audit(63.930:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4251 comm="syz.0.48" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffaed1e368 code=0x7ffc0000 [ 64.102638][ T26] audit: type=1326 audit(63.930:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4251 comm="syz.0.48" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaed1e368 code=0x7ffc0000 [ 64.183948][ T26] audit: type=1326 audit(63.930:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4251 comm="syz.0.48" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaed1e368 code=0x7ffc0000 [ 64.458220][ T4265] ipt_CLUSTERIP: Please specify destination IP [ 65.083592][ T4223] F2FS-fs (loop4): Found nat_bits in checkpoint [ 65.098834][ T4259] loop3: detected capacity change from 0 to 256 [ 65.136847][ T4259] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 65.741942][ T4284] udc-core: couldn't find an available UDC or it's busy [ 65.754629][ T4284] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 65.979679][ T4286] udc-core: couldn't find an available UDC or it's busy [ 65.981402][ T4286] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 66.523418][ T4295] udc-core: couldn't find an available UDC or it's busy [ 66.525004][ T4295] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 67.545967][ T4302] udc-core: couldn't find an available UDC or it's busy [ 67.548208][ T4302] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 67.559195][ T4301] udc-core: couldn't find an available UDC or it's busy [ 67.560724][ T4301] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 68.428243][ T4314] udc-core: couldn't find an available UDC or it's busy [ 68.429870][ T4314] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 69.642793][ T2057] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.644968][ T2057] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.075980][ T1533] cfg80211: failed to load regulatory.db [ 70.158400][ T4298] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 70.387820][ T4339] loop3: detected capacity change from 0 to 2048 [ 70.554580][ T4339] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 70.568115][ T4298] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 70.570197][ T4298] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.572544][ T4298] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 70.574486][ T4298] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.576705][ T4298] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.600705][ T4339] process 'syz.3.77' launched './file1' with NULL argv: empty string added [ 70.728172][ T4298] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 70.730187][ T4298] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 70.732152][ T4298] usb 1-1: Product: syz [ 70.733048][ T4298] usb 1-1: Manufacturer: syz [ 70.790162][ T4298] cdc_wdm 1-1:1.0: skipping garbage [ 70.791424][ T4298] cdc_wdm 1-1:1.0: skipping garbage [ 70.814088][ T4298] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 70.815520][ T4298] cdc_wdm 1-1:1.0: Unknown control protocol [ 70.823318][ T4344] loop3: detected capacity change from 0 to 256 [ 70.865270][ T4344] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 71.005664][ T4298] usb 1-1: USB disconnect, device number 2 [ 71.061155][ T26] kauditd_printk_skb: 47 callbacks suppressed [ 71.061167][ T26] audit: type=1326 audit(71.020:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4347 comm="syz.3.80" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa12ce368 code=0x7ffc0000 [ 71.075446][ T26] audit: type=1326 audit(71.020:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4347 comm="syz.3.80" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=135 compat=0 ip=0xffffa12ce368 code=0x7ffc0000 [ 71.099314][ T26] audit: type=1326 audit(71.030:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4347 comm="syz.3.80" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa12ce368 code=0x7ffc0000 [ 71.182824][ T4354] serio: Serial port tty27 [ 71.229044][ T4324] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 71.230971][ T4324] IPv6: NLM_F_CREATE should be set when creating new route [ 71.256087][ T4357] overlayfs: missing 'lowerdir' [ 71.458060][ T26] audit: type=1326 audit(71.410:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4360 comm="syz.4.84" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3ecc368 code=0x7ffc0000 [ 71.467846][ T26] audit: type=1326 audit(71.410:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4360 comm="syz.4.84" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb3ecc368 code=0x7ffc0000 [ 71.487202][ T26] audit: type=1326 audit(71.430:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4360 comm="syz.4.84" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3ecc368 code=0x7ffc0000 [ 71.511165][ T26] audit: type=1326 audit(71.440:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4360 comm="syz.4.84" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb3ecc368 code=0x7ffc0000 [ 72.333846][ T26] audit: type=1326 audit(71.440:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4360 comm="syz.4.84" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3ecc368 code=0x7ffc0000 [ 72.393662][ T26] audit: type=1326 audit(71.440:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4360 comm="syz.4.84" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb3ecc368 code=0x7ffc0000 [ 72.403133][ T26] audit: type=1326 audit(71.440:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4360 comm="syz.4.84" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3ecc368 code=0x7ffc0000 [ 73.569910][ T4384] loop4: detected capacity change from 0 to 512 [ 73.651749][ T4384] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 73.689521][ T4384] EXT4-fs (loop4): 1 truncate cleaned up [ 73.690948][ T4384] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 74.502227][ T4398] [ 74.502850][ T4398] ====================================================== [ 74.504354][ T4398] WARNING: possible circular locking dependency detected [ 74.505988][ T4398] 5.15.173-syzkaller #0 Not tainted [ 74.507124][ T4398] ------------------------------------------------------ [ 74.508553][ T4398] syz.1.94/4398 is trying to acquire lock: [ 74.509867][ T4398] ffff0000ca920b98 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: __flush_work+0xd0/0x1c0 [ 74.512255][ T4398] [ 74.512255][ T4398] but task is already holding lock: [ 74.513898][ T4398] ffff0000ca920ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x64/0x1060 [ 74.515920][ T4398] [ 74.515920][ T4398] which lock already depends on the new lock. [ 74.515920][ T4398] [ 74.518292][ T4398] [ 74.518292][ T4398] the existing dependency chain (in reverse order) is: [ 74.520288][ T4398] [ 74.520288][ T4398] -> #3 (&hdev->req_lock){+.+.}-{3:3}: [ 74.522037][ T4398] __mutex_lock_common+0x194/0x2154 [ 74.523337][ T4398] mutex_lock_nested+0xa4/0xf8 [ 74.524454][ T4398] hci_dev_do_close+0x64/0x1060 [ 74.525656][ T4398] hci_rfkill_set_block+0xdc/0x1d0 [ 74.526938][ T4398] rfkill_set_block+0x18c/0x37c [ 74.528142][ T4398] rfkill_fop_write+0x594/0x750 [ 74.529367][ T4398] vfs_write+0x280/0xb44 [ 74.530374][ T4398] ksys_write+0x15c/0x26c [ 74.531442][ T4398] __arm64_sys_write+0x7c/0x90 [ 74.532582][ T4398] invoke_syscall+0x98/0x2b8 [ 74.533681][ T4398] el0_svc_common+0x138/0x258 [ 74.534777][ T4398] do_el0_svc+0x58/0x14c [ 74.535802][ T4398] el0_svc+0x7c/0x1f0 [ 74.536721][ T4398] el0t_64_sync_handler+0x84/0xe4 [ 74.537895][ T4398] el0t_64_sync+0x1a0/0x1a4 [ 74.538974][ T4398] [ 74.538974][ T4398] -> #2 (rfkill_global_mutex){+.+.}-{3:3}: [ 74.540680][ T4398] __mutex_lock_common+0x194/0x2154 [ 74.541954][ T4398] mutex_lock_nested+0xa4/0xf8 [ 74.543262][ T4398] rfkill_register+0x44/0x7a4 [ 74.544350][ T4398] hci_register_dev+0x3e0/0x880 [ 74.545493][ T4398] vhci_create_device+0x2c4/0x568 [ 74.546764][ T4398] vhci_write+0x318/0x3b8 [ 74.547850][ T4398] vfs_write+0x884/0xb44 [ 74.548842][ T4398] ksys_write+0x15c/0x26c [ 74.549926][ T4398] __arm64_sys_write+0x7c/0x90 [ 74.550991][ T4398] invoke_syscall+0x98/0x2b8 [ 74.552170][ T4398] el0_svc_common+0x138/0x258 [ 74.553341][ T4398] do_el0_svc+0x58/0x14c [ 74.554324][ T4398] el0_svc+0x7c/0x1f0 [ 74.555248][ T4398] el0t_64_sync_handler+0x84/0xe4 [ 74.556471][ T4398] el0t_64_sync+0x1a0/0x1a4 [ 74.557572][ T4398] [ 74.557572][ T4398] -> #1 (&data->open_mutex){+.+.}-{3:3}: [ 74.559308][ T4398] __mutex_lock_common+0x194/0x2154 [ 74.560540][ T4398] mutex_lock_nested+0xa4/0xf8 [ 74.561658][ T4398] vhci_send_frame+0x8c/0x10c [ 74.562741][ T4398] hci_send_frame+0x194/0x2f0 [ 74.563899][ T4398] hci_tx_work+0x9ac/0x16cc [ 74.564964][ T4398] process_one_work+0x790/0x11b8 [ 74.566104][ T4398] worker_thread+0x910/0x1034 [ 74.567177][ T4398] kthread+0x37c/0x45c [ 74.568166][ T4398] ret_from_fork+0x10/0x20 [ 74.569209][ T4398] [ 74.569209][ T4398] -> #0 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 74.571224][ T4398] __lock_acquire+0x32d4/0x7638 [ 74.572411][ T4398] lock_acquire+0x240/0x77c [ 74.573592][ T4398] __flush_work+0xf8/0x1c0 [ 74.574751][ T4398] flush_work+0x24/0x38 [ 74.575703][ T4398] hci_dev_do_close+0x16c/0x1060 [ 74.576928][ T4398] hci_rfkill_set_block+0xdc/0x1d0 [ 74.578099][ T4398] rfkill_set_block+0x18c/0x37c [ 74.579343][ T4398] rfkill_fop_write+0x594/0x750 [ 74.580503][ T4398] vfs_write+0x280/0xb44 [ 74.581534][ T4398] ksys_write+0x15c/0x26c [ 74.582573][ T4398] __arm64_sys_write+0x7c/0x90 [ 74.583695][ T4398] invoke_syscall+0x98/0x2b8 [ 74.584899][ T4398] el0_svc_common+0x138/0x258 [ 74.586018][ T4398] do_el0_svc+0x58/0x14c [ 74.586941][ T4398] el0_svc+0x7c/0x1f0 [ 74.587950][ T4398] el0t_64_sync_handler+0x84/0xe4 [ 74.589118][ T4398] el0t_64_sync+0x1a0/0x1a4 [ 74.590258][ T4398] [ 74.590258][ T4398] other info that might help us debug this: [ 74.590258][ T4398] [ 74.592452][ T4398] Chain exists of: [ 74.592452][ T4398] (work_completion)(&hdev->tx_work) --> rfkill_global_mutex --> &hdev->req_lock [ 74.592452][ T4398] [ 74.595704][ T4398] Possible unsafe locking scenario: [ 74.595704][ T4398] [ 74.597459][ T4398] CPU0 CPU1 [ 74.598643][ T4398] ---- ---- [ 74.599816][ T4398] lock(&hdev->req_lock); [ 74.600769][ T4398] lock(rfkill_global_mutex); [ 74.602402][ T4398] lock(&hdev->req_lock); [ 74.603889][ T4398] lock((work_completion)(&hdev->tx_work)); [ 74.605090][ T4398] [ 74.605090][ T4398] *** DEADLOCK *** [ 74.605090][ T4398] [ 74.606827][ T4398] 2 locks held by syz.1.94/4398: [ 74.608007][ T4398] #0: ffff800016e77268 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x250/0x750 [ 74.610164][ T4398] #1: ffff0000ca920ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x64/0x1060 [ 74.612257][ T4398] [ 74.612257][ T4398] stack backtrace: [ 74.613527][ T4398] CPU: 1 PID: 4398 Comm: syz.1.94 Not tainted 5.15.173-syzkaller #0 [ 74.615152][ T4398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 74.617312][ T4398] Call trace: [ 74.618048][ T4398] dump_backtrace+0x0/0x530 [ 74.619073][ T4398] show_stack+0x2c/0x3c [ 74.620065][ T4398] dump_stack_lvl+0x108/0x170 [ 74.621066][ T4398] dump_stack+0x1c/0x58 [ 74.621966][ T4398] print_circular_bug+0x150/0x1b8 [ 74.622974][ T4398] check_noncircular+0x2cc/0x378 [ 74.624024][ T4398] __lock_acquire+0x32d4/0x7638 [ 74.625085][ T4398] lock_acquire+0x240/0x77c [ 74.626038][ T4398] __flush_work+0xf8/0x1c0 [ 74.626959][ T4398] flush_work+0x24/0x38 [ 74.627883][ T4398] hci_dev_do_close+0x16c/0x1060 [ 74.628973][ T4398] hci_rfkill_set_block+0xdc/0x1d0 [ 74.630071][ T4398] rfkill_set_block+0x18c/0x37c [ 74.631074][ T4398] rfkill_fop_write+0x594/0x750 [ 74.632216][ T4398] vfs_write+0x280/0xb44 [ 74.633157][ T4398] ksys_write+0x15c/0x26c [ 74.634067][ T4398] __arm64_sys_write+0x7c/0x90 [ 74.635138][ T4398] invoke_syscall+0x98/0x2b8 [ 74.636159][ T4398] el0_svc_common+0x138/0x258 [ 74.637223][ T4398] do_el0_svc+0x58/0x14c [ 74.638186][ T4398] el0_svc+0x7c/0x1f0 [ 74.639070][ T4398] el0t_64_sync_handler+0x84/0xe4 [ 74.640250][ T4398] el0t_64_sync+0x1a0/0x1a4