last executing test programs: 8.205411927s ago: executing program 4 (id=5): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000010fc5bc3170000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400894fb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000013040000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='mm_page_alloc\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='syzkaller\x00', 0x4, 0xff0, &(0x7f000062b000)=""/4080}, 0xa0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0xa0001f98, 0xe, 0x0, &(0x7f0000000440)="85f17444c5a569f1e21b08c0f264", 0x0, 0xa70a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r6 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0xa, @in6=@loopback, 0x0, 0x4}}, 0xe8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000079000000090000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r7], 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r9}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000380)) 8.117491394s ago: executing program 0 (id=1): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioperm(0x0, 0x4003, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, 0x0, 0x0}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000005000000020000000000000c00000000020000000100000f010000000400000003000000000000000c000000000000000f030000000eeb3100612e5f"], &(0x7f00000000c0)=""/136, 0x51, 0x88, 0x1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000006ad600850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mincore(&(0x7f0000001000/0x4000)=nil, 0x4000, &(0x7f0000000240)=""/210) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r6 = dup(r1) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r8, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0xe22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 7.949804543s ago: executing program 4 (id=6): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000080)=0x10000) read$dsp(0xffffffffffffffff, &(0x7f00000002c0)=""/4096, 0x1000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000036000000", 0xfe60) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x20) r2 = mq_open(&(0x7f0000001500)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x03\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\xd2\xdcJ\x10\a1\xf0\xe4\xe3R\x95\xee\xe4\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\xfd\x04\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1\x856\xe7`83\xb7n#\xe0\xc1_\xec\xba\xdezthU\xe3\a\x8b\xc5\x86woo\xbcnq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa24\n%\xf1\xd8u\xedt\xc1-\x16\x86\x85\xb4\x96\x02\x1bI<\x1e\xbd\x1c\xd0\x19\x96h\xc3\x14\xfb\xf7\x10\xee\x91\x9e\x01G\xbfN\x95g\xc3vU\r\xa7\"\t\x1b\x9f\xf1f\x1foP\xc5\x13\x8fF\xf0\xa4 *n\x8e1\xb5;\xa2\x8b\xc4\xf9\x1a{\xe0\f\xd9\x89\xd2wg \xde78z\"(V0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) read$dsp(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) connect$can_bcm(0xffffffffffffffff, &(0x7f0000001ff0), 0x10) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={0x0}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) close(r4) r5 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r5, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0x20}, 0x140, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000, 0x11}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x7ffff, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0xc, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x84, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11, 0x16010000}}], 0x98}, 0x4dc) setsockopt$sock_attach_bpf(r4, 0x1, 0xd, &(0x7f00000001c0), 0x45) close(r4) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="231f315009eec265ca9303bd6969b312f303a1a7ada350089db440ae2b61f370d22eeee5399fbe0a65bdbbb68c94fdf6e532ca5682fca461fc504b484d342903e6b5888aac354f673b26a3469ff0c4f13d6de196acc62fd27ba65f0cb0cb65129f50035f8056e63b9c57794466", 0x6d}], 0x1, 0x6, 0x50, 0x6) 7.009375352s ago: executing program 4 (id=7): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x0, 0x0, 0xa, 0x0, 0x1, 0x42b}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_FLAGS={0x8, 0xd, 0x3}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}}, 0x0) 6.983854598s ago: executing program 1 (id=2): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup(r2, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000000)='cpu.stat\x00', 0x300, 0x0) preadv(r4, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/114, 0x72}], 0x1, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) timer_create(0x3, 0x0, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000640)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@fowner_lt}, {@subj_user={'subj_user', 0x3d, '\\&'}}]}}) removexattr(0x0, &(0x7f00000001c0)=@known='system.posix_acl_access\x00') timer_gettime(0x0, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x6e, 0x80800) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x9a) 6.903909273s ago: executing program 2 (id=8): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x1, 0x14fe, &(0x7f0000002ac0)="$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") syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000640), 0xd, 0x5f1, &(0x7f0000000680)="$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") chdir(&(0x7f00000003c0)='./bus\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='fib6_table_lookup\x00'}, 0x10) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0\x00', 0x8, 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x138) read$FUSE(r4, &(0x7f0000003fc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r4, &(0x7f00000000c0)={0x18, 0xfffffffffffffffe, r5, {0x80}}, 0x18) write$binfmt_misc(r4, &(0x7f0000000140)={'syz0'}, 0x4) 6.884874557s ago: executing program 3 (id=4): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000004380)='./file0/file0\x00', 0x0) socket(0x0, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001540)=@mpls_getroute={0x15, 0x1a, 0x1}, 0x1c}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0xfffffffffffffffd, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x48) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x3, 0xe2}, @noop]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x7, 0x0, 0x200, 0x1080, r3, 0x1, '\x00', 0x0, r3, 0x2, 0x1, 0x4}, 0x48) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x14) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}}, 0xfe4f) close(r0) 6.702798705s ago: executing program 0 (id=9): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000040)={[{@commit={'commit', 0x3d, 0x7999b593}}, {@nouid32}, {@resuid}, {@abort}, {@nobarrier}, {@abort}, {@grpquota}, {@orlov}, {@debug}, {@errors_remount}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x4508, &(0x7f00000000c0), 0xe, 0x4da, &(0x7f0000000740)="$eJzs3d9vFFsdAPDvTLvYQrFFfUASgQimEGXbUoHGB8TEyBOJiu9Y223TdNttulugDdES/wATY9TEJ5588T8wMTz4BxgTE303/oxR0Acf7r17s7uzUMput7l32yHt55MMc87Z2X6/Z8jOzsw52Qng2LoYEXciYiAirkbEaNaeZsvdRmW7td3LF0/mGksS9fr9fyeRZG27/+ap1ltiKCK+fTfie8nbcaubW8uz5XJpPatP1FbWJqqbW9eWVmYXS4ul1enpqZszt2ZuzEz2pZ+Nft3++t9++qNffuP2b7706M8P/nnl+420RrLXO/WjH1pdLzT3RdtgRKwfRLAcDGTrQs8tf3vguQAA0FvjHP9TEfH55vn/aAw0z04BAACAo6T+1ZF4L4moAwAAAEdW2pwDm6TFbC7ASKRpsdiaw/uZOJmWK9XaFxcqG6vzrbmyY1FIF5bKpclsTu1YFJJGfapZfl2/vqs+HRFnIuIno8PNenGuUp7P++YHAAAAHBOndl3//2+0df0PAAAAHDFjeScAAAAAHLg3rv+f5ZcHAAAAcHCM/wMAAMCR9s179xpLvf386/mHmxvLlYfX5kvV5eLKxlxxrrK+VlysVBabv9m30uvvlSuVtS/H6sbjiVqpWpuobm49WKlsrNYeLL3xCGwAAADgEJ258PxPSURsf2W4uTScyDsp4FAkvTbYedfurwebC3C4BvJOAMjNYN4JALkp5J0AkLte9wG6Tt75Xf9zAQAADsb4Z1+N/w+329rj/73vDfQcPQTeYWneCQAAh874PxxfBTMA4dj75O6GJGJ7R/Xjj//X6x8lLwAAoH9GmkuSFrOxwJFI02Ix4nTzsQCFZGGpXJrMrg/+OFr4RKM+1XxnYvQfAAAAAAAAAAAAAAAAAAAAAAAAAPapXk+iDgAAABxpEek/kuxJ/uOjl0d23x84kfx/tLmOiEe/uP+zx7O12vpUo/0/r9prP8/ar3ueOAAAALwL2tfp7et4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOinly+ezLWXt148cXBx//W1iBjrFH8whprroShExMn/JjG4431JRAz0If7204g42yl+0kgrxrIsOsUfzjF+GhGn+hAfjrPnjePPnU6fvzQuNtedP3+N8t/7EL/78S99dfwb6HL8Ob3PGOe294j/NOLcYOfjTzt+0iX+pX3G/+53tra6vVZ/FjHe8fsneSPWRG1lbaK6uXVtaWV2sbRYWp2enro5c2vmxszkxMJSuZT92zHGjz/36w/26v/JLvHHWv2/0K3/l/fZ//f/8PjFp1vFQqf4Vy51/v4924r/1v5Ps+++L2Tll/X6D8azcrLd2p87nf/V78/v1f/5Lv3v9f9/ZZ/9v/qtH/5ln5sCAIegurm1PFsul9YVOhfqdTtK4UgWYmivbfI+MgEAAP32+qQ/70wAAAAAAAAAAAAAAAAAAADg+DqMXxrbHXOPn6MGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMjNhwEAAP//LNjXMw==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000952000/0x2000)=nil, 0x2000, 0xf, 0x28011, r0, 0xffffd000) open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b900000000fffffffff2060000000000000200"}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x91905a, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000340)='./file0/../file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0) mount(&(0x7f0000000080)=@filename='\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x261002, 0x0) umount2(&(0x7f0000000300)='./file0\x00', 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x1008810, &(0x7f0000002600)=ANY=[], 0x1, 0x5f4, &(0x7f000001f6c0)="$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") lremovexattr(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)=@known='trusted.overlay.impure\x00') 6.701584695s ago: executing program 1 (id=10): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r2, r1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1000}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000001c0)) unshare(0x2a020400) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f00000000c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) getsockopt$bt_l2cap_L2CAP_LM(r5, 0x112, 0x4, 0x0, &(0x7f0000000080)) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x284602, 0x0) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000240)={r7}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) 6.387879907s ago: executing program 3 (id=11): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000001040), &(0x7f0000001080)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x1, 0x1029, &(0x7f0000001100)="$eJzs3V9sneddB/Df8/o4x0kQc9c1a8qETlukRhmNEqfd7AUkZzXWJkWtVcfjj0D4xD5Jj+rYlu1U6RSQdwFIwNQLxAV3vukFXPV2QoBHQdoFmgRCQogbi7VlE0Ky6DS4M3rf85z4OHWWUMdx/nw+cvx9z/v+nvd9XkfP8evIyi8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIiv/sr502fSQc8CALifXp18/fSQ7/8A8Fi56Od/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADuLEURfxYppj/YTNPV646BC+35a9enxsZ3H3Y4VSP7qvryz8CZobMvvfylLw9386ePv9eOx2uTF883Xlm4urjUWl5uzTam5tszC7Otuz7DXsff6mT1BWhcffPa7OXLy42hU2d3HL4++FH96LHBc8PHR4a6tVNj4+OTPTW1/k999U9I9+5UPEIORRG/Gik+fuKHqRkRRex9LdzhvWO/HY5auf6qm5gaG69uZK7dnF8pD050F0ItotEzaLS7Ru7DWtyT1eojinLCJ8vbm1xsLjUvzbUaE82llfZKe2F+InVmW95PI4oYThFrEbFRP+jJ86DpjyL+KVIs1jfTpYjo666DL746+frpodsPrN3HSe6inGejP2KteAjWLDyg6lHEVqSoz5yImbysq6X9QcQLZc6leLfMGxGpfGN4I+JD30fgkVCLIv4oUvz43GaarZ4Hus+VF77R+Pr85YWe2u5z5UP/88H95NmEB9hAFNGsnvg306f/xy4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHg8HI4i/iNSnPzLt6q+0lH1pf/MueGvnurr7Rn/9B3OU9aeiog/LO6uJ++h3Gt8Ik2kVOzDjQF3NBBF/E7u//etg54MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHLgi/jlSfOX7J9Ja+fLk1Nh4Y3KxudSev9K42Lw016qqJlKnc38jj9ra2tpqpE6O5pzOuZpzLed6zo2cUeTxOUdzTudczbmWcz3nRs7oy+Nzjuaczrmacy3nes6NnFHL43OO5pzOuZpzLed6zo2c0X+Af10AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwL4poognI8W339lMkSJiNWI6OrleP+jZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMOhnor480jxG7XRm/tqEZGqj44T5ae5GO0v82sxeqrMGzF6PmezyoHRbx3A/IFPrz8V8b1I8fafvndzwef13995dfNtIN69sf3qmVoni+7BwY/qR4995tzw+aHnbreddpvAyQvt+WvXG1Nj4+OTPbtr+eqf7dk3mK9b3Jtbh8fe8tvffLM5N9dasmHDho2bGwf9zgTst/L5/9lI8Ws/+NfIj/Td5/+f6bzqu1n7P7+7/fw/cuuJ9un5/8mefSP5p5H+WsTAytXF/qciBpbf/uaL7avNK60rrfmhl4ZOj4y8/HL/oYiBy+251untrT1/pQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHispSL+JlL86LubqRER16t+fYPnho+PDPVFX9Vvb0ffvtcmL55vvLJwdXGptbzcmm1MzbdnFmZbd3u5gard39TY+L7czB0d3uf5Hx54ZWHx7aX2lTdWdj1+ZOD8peWVpebM7ofjcNQiRnv3nKwmPDU2Xk16rt2cr4ZO7NpMEf5/+lMRP4kUF367kZ7N+3L/z9wOdLv/Z2///9VbT7RP/T+f6NlXXjOlIv4tUrzw1tPxbDXPI/GJNZPrfhQpzrz1hVwXh8q67hw+W33utAYta/89Ujzz+ztru/1Qn9yuPXPXX1h4CJTr/2uRYrHvL+K5vC+v/7wCd1//R2490T6t/8/17Cuvud2kfM+3Do+9cv3/Y6T4+X95L57P+3au/+1VW67/Im+fyMWHuwf3af0/1bNvMF/3F+7NrQMAAAAAAAAAAMBDqz8V8ceR4vf+oZZezPvu5vd/Z2890T79/t/ne/bN7vj93/3b2PMXFQAAAAAAAAAAAAAAAAAAAAAAAG6jPxVxPlK88533bvbQ3tn/u6f/5y9t9/8cS7ccrf6fr589N3x8ZOhe/v9fvQbzdaf3ftsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsENKRTwTKV546+mqr36KI1Xn/9Fd6v4gUnznl38x16VjZd1qPj5YfR54dWH+xfNzcwszzZXmpblWY3KxOdMqx/56pPjP//pCHlscKsc+m8c+0Rl7uT3XOl3Wvh8pfuvDbm1Utc/l2s9t154pa38zUvzvD3bWPp9rn9quHSpr/ypSjP9k99pj27Vny9qjkeLjP2l0a4+UtS/m2s9v156aWZib3Ye/FgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADus/5UxGcixfPvr93s5V/r9Lzv73lZefdGtX9X1wc/qh89Nnhu+PjI0O22dx178kJ7/tr1xtTY+Phkz+5avvrgvblNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYkxRF9Xn6g820Xi+3OgYutOevXZ8aG9992OFUjeyr6ss/A2eGzr708pe+PNzNnz7+Xjser01ePN94ZeHq4lJrebk125iab88szLbu+gx7HX+rk9UXoHH1zWuzly8vN4ZOnd1x+PrgR/WjxwbPDR8fGerWTo2Nj0/21NT6P/XVPyHdu1PxCDkURfx1pPj4iR+m79ajejfY61q4w3vHfjsctXL9VTcxNTZe3chcuzm/Uh6c6C6EWkSjZ9Bod43ch7W4J6vVRxTlhE+Wtze52FxqXpprNSaaSyvtlfbC/ETqzLa8n0YUMZwi1iJio37Qk+dB0x9FjESKxfpm+tt6RF93HXzx1cnXTw/dfmDtPk5yF+U8G/0Ra8VDsGbhAVWPIi5HivrMiXi/3lnW1dL+IOKFMudSvFvmjYhUvjG8EfGh7yPwSKhFEf8dKX58bjP9Xb18Hug+V174RuPr85cXemq7z5UP/c8H95NnEx5gA1HE96on/s30976vAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAHRTxc5HiK98/kar+0Dd7SrfnrzQuNi/Nddr6dXv/dXtmb21tbTVSJ0dzTudczbmWcz3nRs4o8vicozmnc67mXMu5nnMjZ/Tl8TlHc07nXM25lnM950bOqOXxOUdzTudczbmWcz3nRs7Quw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCRVUQRT0eKb7+zmbbqEbEaMR2dXK8f9OyA/fR/AQAA//+Uiwdc") mkdir(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x20, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000010000000000000000000000911203000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@empty, 0x0, 0x3c}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in6=@private2}]}, 0x104}}, 0x0) 5.684912938s ago: executing program 4 (id=12): syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) pselect6(0x40, &(0x7f0000000480)={0x8, 0x0, 0x10, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) dup(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x110, 0x0, &(0x7f0000000240), &(0x7f0000000040)) syz_emit_ethernet(0xa2, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB], 0xa) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$join(0x1, 0x0) keyctl$join(0x1, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0x0, 0x411}}}, 0x7) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x9, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0x40045542, 0x0) 4.964558282s ago: executing program 1 (id=13): syz_open_dev$loop(&(0x7f0000000000), 0x2000000, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x5}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r3 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) syz_pidfd_open(r3, 0x0) syz_clone(0xf58a3180, 0x0, 0x0, 0x0, 0x0, 0x0) close(r2) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) ioctl$SIOCSIFHWADDR(r2, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x40, r7, 0xb7a006d1969b963b, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @probe_request={{{}, {}, @broadcast, @device_b}, @void, @void, @void, @void, @val={0x72, 0x6}}}]}, 0x40}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="02000000000a"}) 4.034705457s ago: executing program 2 (id=14): getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e20, 0x3, @local, 0x10000}}, 0xfffffff8, 0x9, 0xfff, 0x3, 0x7}, &(0x7f0000000180)=0x98) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x20000000000091, 0x2) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000695ffc)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0000000000000000002", 0x11) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021380ee02"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000500)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[], 0x41}}, 0x8004) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/234, 0xea}], 0x1, 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x0, 0x80000}) 4.033354289s ago: executing program 4 (id=15): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x10, 0x0, 0x0, 0x8000, 0x8}, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x1}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x36}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) ioctl$TUNSETLINK(r4, 0x400454cd, 0x306) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000004100)={0x0, 0x30, 0x0, 0x0, &(0x7f0000000140)=[@rights], 0x18}, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x8914, 0x20000000) close(r4) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x10, 0x19, &(0x7f0000000300)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ldst={0x2, 0x3, 0x6, 0x8, 0x3, 0x100, 0x2679b781b2fed18c}], &(0x7f0000000400)='syzkaller\x00', 0xffffff7f, 0xc, &(0x7f0000000440)=""/12, 0x41100, 0x41, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000004c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0xd, 0x0, 0x800}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000540)=[r0], &(0x7f0000000580)=[{0x1, 0x5, 0x2, 0x8}], 0x10, 0x402b9ba}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_int(r0, &(0x7f0000000100), 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00', r7}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000001440)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r8, 0x400454c9, 0x3) ioctl$TUNDETACHFILTER(r8, 0x401054d6, 0x0) 3.771949051s ago: executing program 1 (id=16): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000080018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001800000000000000000000000000000018000000000000000000000000000000bf91000000000000b7020000010000008500000000000000"], 0x0}, 0x90) syz_emit_ethernet(0x8a, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x9) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000017c0), 0x4) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x14, 0x0, 0x0, 0x70bd2d}, 0x14}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r5, &(0x7f00000032c0), 0x0, 0x40002061, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000400)='net/mcfilter6\x00') lseek(r6, 0x8, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 3.770853375s ago: executing program 3 (id=17): prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYBLOB="2703000076fdf20fab00000000400000", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000186000e900"/31], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='huge=always,huge=within_si']) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup(0xffffffffffffffff) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x79}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) read(r0, &(0x7f0000000380)=""/167, 0xa7) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x23008c4, &(0x7f00000003c0), 0x1, 0x598, &(0x7f0000000800)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./bus\x00', 0x100010e, &(0x7f00000005c0)={[{@nodelalloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x8}}, {@journal_dev={'journal_dev', 0x3d, 0x7fffffff}}, {@auto_da_alloc}]}, 0x2, 0x464, &(0x7f0000001080)="$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") 3.572672167s ago: executing program 0 (id=18): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000180), &(0x7f0000000200)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x26}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xc, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xb8}}, &(0x7f0000000000)='GPL\x00', 0x9}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$SIOCSIFHWADDR(r1, 0x8946, 0x0) 3.548986056s ago: executing program 4 (id=19): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x12, 0x8000000, 0x4, 0x0, 0x2, 0x1}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff2000/0x6000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x1000000}, 0x68) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioperm(0x0, 0x1b, 0x8001) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@mcast2, 0x8000000, 0x2, 0x0, 0x0, 0x20}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) dup2(r3, r2) 144.970896ms ago: executing program 1 (id=20): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000001900)=ANY=[], 0x1, 0x1d2, &(0x7f0000000580)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r3, 0x2a065000) bpf$MAP_CREATE(0x0, 0x0, 0x0) msgget$private(0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000140)={0x2, 0x0, @multicast2}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f0000000d80), 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)) 0s ago: executing program 2 (id=21): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001780)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000001b00)='./file0\x00', &(0x7f0000001b40), 0x0, &(0x7f0000001c40)={[{@subsystem='net_prio'}, {@subsystem='pids'}]}) io_setup(0x6, &(0x7f0000002140)=0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001b80)={{r7}, &(0x7f0000001b00), &(0x7f0000001b40)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_unlink_exit\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x12}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) io_submit(r6, 0x1, &(0x7f0000002340)=[&(0x7f0000002180)={0x3000000, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.74' (ED25519) to the list of known hosts. [ 63.125827][ T5221] cgroup: Unknown subsys name 'net' [ 63.289527][ T5221] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.608915][ T5221] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.320086][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.328475][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.337038][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.345722][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.354667][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.388903][ T5249] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.395756][ T5251] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.399284][ T5250] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.403724][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.412872][ T5250] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.418570][ T5253] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.426311][ T5250] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.433213][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.439513][ T5250] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.447182][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.454778][ T5252] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.460706][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.468022][ T5250] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.476947][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.482852][ T5252] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.496319][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.498401][ T5252] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.511088][ T5250] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.512116][ T5237] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.519209][ T5252] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.532530][ T5250] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.539860][ T5252] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.549252][ T5252] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 68.556717][ T5252] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.569098][ T5252] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.943148][ T5231] chnl_net:caif_netlink_parms(): no params data found [ 69.025372][ T5234] chnl_net:caif_netlink_parms(): no params data found [ 69.043392][ T5232] chnl_net:caif_netlink_parms(): no params data found [ 69.069190][ T5233] chnl_net:caif_netlink_parms(): no params data found [ 69.099412][ T5235] chnl_net:caif_netlink_parms(): no params data found [ 69.181312][ T5231] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.189280][ T5231] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.197325][ T5231] bridge_slave_0: entered allmulticast mode [ 69.205220][ T5231] bridge_slave_0: entered promiscuous mode [ 69.213941][ T5231] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.221059][ T5231] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.228648][ T5231] bridge_slave_1: entered allmulticast mode [ 69.235885][ T5231] bridge_slave_1: entered promiscuous mode [ 69.315757][ T5231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.328173][ T5231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.337713][ T5234] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.346086][ T5234] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.353442][ T5234] bridge_slave_0: entered allmulticast mode [ 69.360004][ T5234] bridge_slave_0: entered promiscuous mode [ 69.373815][ T5232] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.380920][ T5232] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.388888][ T5232] bridge_slave_0: entered allmulticast mode [ 69.395819][ T5232] bridge_slave_0: entered promiscuous mode [ 69.404168][ T5232] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.412017][ T5232] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.419239][ T5232] bridge_slave_1: entered allmulticast mode [ 69.426823][ T5232] bridge_slave_1: entered promiscuous mode [ 69.447859][ T5234] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.455242][ T5234] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.462847][ T5234] bridge_slave_1: entered allmulticast mode [ 69.469899][ T5234] bridge_slave_1: entered promiscuous mode [ 69.489181][ T5235] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.499989][ T5235] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.507889][ T5235] bridge_slave_0: entered allmulticast mode [ 69.515301][ T5235] bridge_slave_0: entered promiscuous mode [ 69.523363][ T5235] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.530603][ T5235] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.539302][ T5235] bridge_slave_1: entered allmulticast mode [ 69.546723][ T5235] bridge_slave_1: entered promiscuous mode [ 69.568699][ T5233] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.576451][ T5233] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.586290][ T5233] bridge_slave_0: entered allmulticast mode [ 69.594741][ T5233] bridge_slave_0: entered promiscuous mode [ 69.619224][ T5231] team0: Port device team_slave_0 added [ 69.630977][ T5231] team0: Port device team_slave_1 added [ 69.643564][ T5233] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.650673][ T5233] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.658522][ T5233] bridge_slave_1: entered allmulticast mode [ 69.665231][ T5233] bridge_slave_1: entered promiscuous mode [ 69.673801][ T5232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.685376][ T5232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.715268][ T5234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.755957][ T5235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.766774][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.773924][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.801260][ T5231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.814822][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.822109][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.851735][ T5231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.866313][ T5234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.886787][ T5233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.899772][ T5232] team0: Port device team_slave_0 added [ 69.917085][ T5235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.948552][ T5233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.969300][ T5232] team0: Port device team_slave_1 added [ 70.006419][ T5231] hsr_slave_0: entered promiscuous mode [ 70.013478][ T5231] hsr_slave_1: entered promiscuous mode [ 70.030643][ T5234] team0: Port device team_slave_0 added [ 70.054695][ T5235] team0: Port device team_slave_0 added [ 70.064834][ T5235] team0: Port device team_slave_1 added [ 70.076627][ T5234] team0: Port device team_slave_1 added [ 70.097914][ T5233] team0: Port device team_slave_0 added [ 70.152385][ T5234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.160092][ T5234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.186357][ T5234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.199079][ T5233] team0: Port device team_slave_1 added [ 70.213226][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.220192][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.247748][ T5232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.260182][ T5235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.270484][ T5235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.297391][ T5235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.319701][ T5234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.326852][ T5234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.356764][ T5234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.375176][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.382885][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.409682][ T5232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.425739][ T5235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.432787][ T5235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.459666][ T5235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.483831][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.491009][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.517568][ T5233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.531030][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.539726][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.539801][ T5239] Bluetooth: hci3: command tx timeout [ 70.567510][ T5233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.612224][ T5239] Bluetooth: hci2: command tx timeout [ 70.615069][ T5248] Bluetooth: hci0: command tx timeout [ 70.619800][ T5246] Bluetooth: hci4: command tx timeout [ 70.624076][ T5248] Bluetooth: hci1: command tx timeout [ 70.670517][ T5232] hsr_slave_0: entered promiscuous mode [ 70.677361][ T5232] hsr_slave_1: entered promiscuous mode [ 70.684114][ T5232] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.692312][ T5232] Cannot create hsr debugfs directory [ 70.706230][ T5235] hsr_slave_0: entered promiscuous mode [ 70.713147][ T5235] hsr_slave_1: entered promiscuous mode [ 70.719265][ T5235] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.727036][ T5235] Cannot create hsr debugfs directory [ 70.780230][ T5234] hsr_slave_0: entered promiscuous mode [ 70.786633][ T5234] hsr_slave_1: entered promiscuous mode [ 70.793485][ T5234] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.801578][ T5234] Cannot create hsr debugfs directory [ 70.849517][ T5233] hsr_slave_0: entered promiscuous mode [ 70.856043][ T5233] hsr_slave_1: entered promiscuous mode [ 70.862521][ T5233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.870087][ T5233] Cannot create hsr debugfs directory [ 71.016254][ T5231] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.047906][ T5231] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.059212][ T5231] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.090359][ T5231] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.235430][ T5235] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.250115][ T5235] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.273642][ T5235] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.294134][ T5235] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.340913][ T5234] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.350713][ T5234] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.378173][ T5234] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.398852][ T5231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.414932][ T5234] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.449962][ T5231] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.464804][ T5232] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.476124][ T5232] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.485655][ T5232] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.505156][ T5232] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.520321][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.527755][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.589230][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.596936][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.613878][ T5233] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.634280][ T5233] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.647587][ T5233] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.657388][ T5233] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.774528][ T5231] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.800360][ T5235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.831280][ T5234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.879581][ T5235] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.911080][ T5232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.939539][ T5234] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.949900][ T2906] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.957114][ T2906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.981259][ T2906] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.988445][ T2906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.005381][ T2906] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.012568][ T2906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.039412][ T2906] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.046602][ T2906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.065823][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.072611][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.089982][ T5235] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.108395][ T5235] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.150535][ T5231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.159935][ T5232] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.191604][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.198768][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.240601][ T5233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.255820][ T2906] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.264748][ T2906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.340959][ T5233] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.391348][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.398720][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.442660][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.449821][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.477949][ T5232] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.500390][ T5232] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.613048][ T5248] Bluetooth: hci3: command tx timeout [ 72.622866][ T5235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.641079][ T5233] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.694260][ T5248] Bluetooth: hci4: command tx timeout [ 72.694375][ T5239] Bluetooth: hci0: command tx timeout [ 72.700136][ T5248] Bluetooth: hci2: command tx timeout [ 72.714347][ T5246] Bluetooth: hci1: command tx timeout [ 72.788055][ T5235] veth0_vlan: entered promiscuous mode [ 72.807769][ T5231] veth0_vlan: entered promiscuous mode [ 72.827674][ T5231] veth1_vlan: entered promiscuous mode [ 72.841772][ T5234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.867918][ T5235] veth1_vlan: entered promiscuous mode [ 72.900361][ T5232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.956430][ T5231] veth0_macvtap: entered promiscuous mode [ 72.969916][ T5231] veth1_macvtap: entered promiscuous mode [ 72.996409][ T5233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.013051][ T5235] veth0_macvtap: entered promiscuous mode [ 73.026263][ T5235] veth1_macvtap: entered promiscuous mode [ 73.051633][ T5234] veth0_vlan: entered promiscuous mode [ 73.068348][ T5232] veth0_vlan: entered promiscuous mode [ 73.082977][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.098239][ T5232] veth1_vlan: entered promiscuous mode [ 73.114989][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.126502][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.138469][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.150350][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.158606][ T5234] veth1_vlan: entered promiscuous mode [ 73.188972][ T5231] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.198435][ T5231] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.208695][ T5231] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.217515][ T5231] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.233163][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.243983][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.260312][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.295176][ T5234] veth0_macvtap: entered promiscuous mode [ 73.316268][ T5235] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.326840][ T5235] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.337417][ T5235] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.346495][ T5235] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.368530][ T5233] veth0_vlan: entered promiscuous mode [ 73.380690][ T5234] veth1_macvtap: entered promiscuous mode [ 73.393089][ T5233] veth1_vlan: entered promiscuous mode [ 73.454554][ T5232] veth0_macvtap: entered promiscuous mode [ 73.481444][ T5232] veth1_macvtap: entered promiscuous mode [ 73.497571][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.508775][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.518899][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.530415][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.545357][ T5234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.570078][ T1127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.584036][ T1127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.591355][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.602966][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.613193][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.623795][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.635137][ T5234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.655222][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.666674][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.670274][ T5233] veth0_macvtap: entered promiscuous mode [ 73.691445][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.702283][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.713902][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.724449][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.736154][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.746830][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.758019][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.770730][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.782902][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.792844][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.803419][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.814337][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.825337][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.836872][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.849946][ T5232] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.858968][ T5232] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.868504][ T5232] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.877681][ T5232] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.896874][ T5234] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.908060][ T5234] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.917266][ T5234] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.926455][ T5234] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.938045][ T5233] veth1_macvtap: entered promiscuous mode [ 73.953926][ T2906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.961757][ T2906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.009599][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.022233][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.032657][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.043901][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.055818][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.066480][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.076439][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.087452][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.104839][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.132581][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.140866][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.166012][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.183041][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.194400][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.207065][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.218873][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.230385][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.241706][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.253194][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.264988][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.310736][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.329356][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.345727][ T5233] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.361705][ T5233] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.372993][ T5233] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.383952][ T5233] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.487764][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.496232][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.559479][ T5319] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 74.623219][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.631705][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.726233][ T5246] Bluetooth: hci3: command tx timeout [ 74.775607][ T5246] Bluetooth: hci2: command tx timeout [ 74.778256][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.783045][ T5239] Bluetooth: hci1: command tx timeout [ 74.790224][ T5252] Bluetooth: hci4: command tx timeout [ 74.795205][ T5246] Bluetooth: hci0: command tx timeout [ 74.839844][ T1127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.842215][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.882519][ T1127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.454431][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.525507][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.641255][ T5330] fuse: Bad value for 'fd' [ 75.730757][ T5334] loop2: detected capacity change from 0 to 256 [ 75.928038][ T5340] loop0: detected capacity change from 0 to 512 [ 75.948529][ T5340] EXT4-fs: Invalid commit interval 2040116627, must be smaller than 21474836 [ 75.960184][ T5334] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 76.186187][ T5340] loop0: detected capacity change from 0 to 512 [ 76.838236][ T5340] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 76.896691][ T5246] Bluetooth: hci3: command tx timeout [ 76.899998][ T5239] Bluetooth: hci4: command tx timeout [ 76.907620][ T5239] Bluetooth: hci2: command tx timeout [ 76.907673][ T5252] Bluetooth: hci0: command tx timeout [ 76.913302][ T5239] Bluetooth: hci1: command tx timeout [ 77.085384][ T5349] loop3: detected capacity change from 0 to 4096 [ 77.107406][ T5340] EXT4-fs (loop0): blocks per group (71) and clusters per group (32768) inconsistent [ 77.279016][ T5352] syz.2.8: attempt to access beyond end of device [ 77.279016][ T5352] loop2: rw=0, sector=524408, nr_sectors = 1 limit=256 [ 77.294524][ T5352] syz.2.8: attempt to access beyond end of device [ 77.294524][ T5352] loop2: rw=0, sector=524408, nr_sectors = 1 limit=256 [ 77.308418][ T5352] syz.2.8: attempt to access beyond end of device [ 77.308418][ T5352] loop2: rw=0, sector=524408, nr_sectors = 1 limit=256 [ 77.323089][ T5352] Buffer I/O error on dev loop2, logical block 524408, async page read [ 77.332669][ T5352] syz.2.8: attempt to access beyond end of device [ 77.332669][ T5352] loop2: rw=0, sector=524408, nr_sectors = 1 limit=256 [ 77.346166][ T5352] Buffer I/O error on dev loop2, logical block 524408, async page read [ 77.398554][ T5352] syz.2.8: attempt to access beyond end of device [ 77.398554][ T5352] loop2: rw=0, sector=524408, nr_sectors = 1 limit=256 [ 77.412667][ T5352] Buffer I/O error on dev loop2, logical block 524408, async page read [ 77.430424][ T5352] syz.2.8: attempt to access beyond end of device [ 77.430424][ T5352] loop2: rw=0, sector=524408, nr_sectors = 1 limit=256 [ 77.750427][ T5354] ======================================================= [ 77.750427][ T5354] WARNING: The mand mount option has been deprecated and [ 77.750427][ T5354] and is ignored by this kernel. Remove the mand [ 77.750427][ T5354] option from the mount to silence this warning. [ 77.750427][ T5354] ======================================================= [ 77.830327][ T29] audit: type=1800 audit(1724372943.631:2): pid=5352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8" name="file1" dev="loop2" ino=1048603 res=0 errno=0 [ 77.867930][ T5352] syz.2.8 (5352) used greatest stack depth: 19192 bytes left [ 77.902537][ T5358] warning: `syz.1.13' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 78.232444][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.240724][ T5354] loop0: detected capacity change from 0 to 1024 [ 78.240846][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.506190][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.662690][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.671019][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.680164][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.690068][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.847701][ T5364] tun0: tun_chr_ioctl cmd 1074812118 [ 79.072111][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.082244][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.749405][ T5375] vivid-000: kernel_thread() failed [ 80.041929][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 82.222480][ T5239] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 82.231710][ T5239] Bluetooth: hci0: Injecting HCI hardware error event [ 82.240185][ T5239] Bluetooth: hci0: hardware error 0x00 [ 83.108704][ T5390] loop1: detected capacity change from 0 to 8 [ 83.964649][ T5386] ================================================================== [ 83.975411][ T5386] BUG: KASAN: slab-use-after-free in squashfs_readahead+0x210c/0x2680 [ 83.986166][ T5386] Read of size 4 at addr ffff88807f1f9ac0 by task syz.1.20/5386 [ 83.995305][ T5386] [ 83.998041][ T5386] CPU: 1 UID: 0 PID: 5386 Comm: syz.1.20 Not tainted 6.11.0-rc4-next-20240822-syzkaller #0 [ 84.009191][ T5386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 84.020062][ T5386] Call Trace: [ 84.023984][ T5386] [ 84.028513][ T5386] dump_stack_lvl+0x241/0x360 [ 84.034857][ T5386] ? __pfx_dump_stack_lvl+0x10/0x10 [ 84.041310][ T5386] ? __pfx__printk+0x10/0x10 [ 84.048126][ T5386] ? _printk+0xd5/0x120 [ 84.052951][ T5386] ? __virt_addr_valid+0x183/0x530 [ 84.058536][ T5386] ? __virt_addr_valid+0x183/0x530 [ 84.064910][ T5386] print_report+0x169/0x550 [ 84.070494][ T5386] ? __virt_addr_valid+0x183/0x530 [ 84.076424][ T5386] ? __virt_addr_valid+0x183/0x530 [ 84.082548][ T5386] ? __virt_addr_valid+0x45f/0x530 [ 84.089362][ T5386] ? __phys_addr+0xba/0x170 [ 84.094073][ T5386] ? squashfs_readahead+0x210c/0x2680 [ 84.101653][ T5386] kasan_report+0x143/0x180 [ 84.106801][ T5386] ? squashfs_readahead+0x210c/0x2680 [ 84.112833][ T5386] squashfs_readahead+0x210c/0x2680 [ 84.118495][ T5386] ? squashfs_readahead+0x6f0/0x2680 [ 84.124687][ T5386] ? __pfx_squashfs_readahead+0x10/0x10 [ 84.131599][ T5386] ? blk_start_plug+0x70/0x1b0 [ 84.136997][ T5386] read_pages+0x17e/0x840 [ 84.142937][ T5386] ? percpu_ref_put+0x19/0x180 [ 84.149244][ T5386] ? __pfx_read_pages+0x10/0x10 [ 84.155968][ T5386] ? filemap_add_folio+0x26d/0x650 [ 84.161205][ T5386] ? __pfx_filemap_add_folio+0x10/0x10 [ 84.166704][ T5386] page_cache_ra_unbounded+0x6ce/0x7f0 [ 84.172558][ T5386] filemap_get_pages+0x543/0x2330 [ 84.177879][ T5386] ? __pfx_filemap_get_pages+0x10/0x10 [ 84.183845][ T5386] ? __pfx___might_resched+0x10/0x10 [ 84.190120][ T5386] ? unwind_next_frame+0x18e6/0x22d0 [ 84.196812][ T5386] filemap_read+0x457/0xfa0 [ 84.201429][ T5386] ? 0xffffffffa0001fa4 [ 84.205623][ T5386] ? __pfx_filemap_read+0x10/0x10 [ 84.213379][ T5386] ? iov_iter_kvec+0x4e/0x180 [ 84.222284][ T5386] __kernel_read+0x532/0x9f0 [ 84.228217][ T5386] ? do_sys_openat2+0x13e/0x1d0 [ 84.233801][ T5386] ? __x64_sys_openat+0x247/0x2a0 [ 84.239001][ T5386] ? __pfx___kernel_read+0x10/0x10 [ 84.244241][ T5386] integrity_kernel_read+0xb0/0x100 [ 84.250072][ T5386] ? __pfx_integrity_kernel_read+0x10/0x10 [ 84.256268][ T5386] ? ima_calc_file_hash+0xab7/0x1b30 [ 84.261575][ T5386] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 84.267246][ T5386] ima_calc_file_hash+0xaef/0x1b30 [ 84.272542][ T5386] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 84.279052][ T5386] ? lockdep_hardirqs_on+0x99/0x150 [ 84.284242][ T5386] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 84.289810][ T5386] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 84.296183][ T5386] ? __x64_sys_openat+0x247/0x2a0 [ 84.301227][ T5386] ? do_syscall_64+0xf3/0x230 [ 84.306177][ T5386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.312314][ T5386] ? mark_lock+0x9a/0x360 [ 84.316657][ T5386] ? make_vfsgid+0x46/0x90 [ 84.321193][ T5386] ? generic_fillattr+0x59c/0x840 [ 84.326310][ T5386] ima_collect_measurement+0x526/0xb20 [ 84.331880][ T5386] ? __pfx_ima_collect_measurement+0x10/0x10 [ 84.338396][ T5386] ? squashfs_xattr_handler_get+0x585/0x900 [ 84.344486][ T5386] ? trace_contention_end+0x3c/0x120 [ 84.349892][ T5386] ? __mutex_lock+0x2ef/0xd70 [ 84.355209][ T5386] ? ima_get_hash_algo+0x156/0x4d0 [ 84.360676][ T5386] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 84.366474][ T5386] process_measurement+0x1357/0x1fb0 [ 84.371876][ T5386] ? __pfx_process_measurement+0x10/0x10 [ 84.377875][ T5386] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 84.385083][ T5386] ? __pfx_apparmor_file_open+0x10/0x10 [ 84.390771][ T5386] ? tomoyo_file_open+0x168/0x220 [ 84.395914][ T5386] ? inode_to_bdi+0x69/0xf0 [ 84.401303][ T5386] ? apparmor_current_getsecid_subj+0xde/0x1b0 [ 84.409175][ T5386] ima_file_check+0xf2/0x170 [ 84.414821][ T5386] ? __pfx_ima_file_check+0x10/0x10 [ 84.420599][ T5386] security_file_post_open+0xb9/0x280 [ 84.425976][ T5386] path_openat+0x2cd0/0x3590 [ 84.430865][ T5386] ? __pfx_path_openat+0x10/0x10 [ 84.435911][ T5386] do_filp_open+0x235/0x490 [ 84.440447][ T5386] ? __pfx_do_filp_open+0x10/0x10 [ 84.445568][ T5386] ? _raw_spin_unlock+0x28/0x50 [ 84.450431][ T5386] ? alloc_fd+0x5a1/0x640 [ 84.454805][ T5386] do_sys_openat2+0x13e/0x1d0 [ 84.460211][ T5386] ? __pfx_do_sys_openat2+0x10/0x10 [ 84.465894][ T5386] __x64_sys_openat+0x247/0x2a0 [ 84.470881][ T5386] ? __pfx___x64_sys_openat+0x10/0x10 [ 84.476895][ T5386] ? do_syscall_64+0x100/0x230 [ 84.482366][ T5386] ? do_syscall_64+0xb6/0x230 [ 84.488643][ T5386] do_syscall_64+0xf3/0x230 [ 84.493277][ T5386] ? clear_bhb_loop+0x35/0x90 [ 84.497954][ T5386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.503848][ T5386] RIP: 0033:0x7f8c81779e79 [ 84.508257][ T5386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.528438][ T5386] RSP: 002b:00007f8c8261a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 84.537507][ T5386] RAX: ffffffffffffffda RBX: 00007f8c81916058 RCX: 00007f8c81779e79 [ 84.548371][ T5386] RDX: 0000000000000000 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 84.557102][ T5386] RBP: 00007f8c817e7916 R08: 0000000000000000 R09: 0000000000000000 [ 84.566794][ T5386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.579427][ T5386] R13: 0000000000000000 R14: 00007f8c81916058 R15: 00007fff0f3deb48 [ 84.591247][ T5386] [ 84.595082][ T5386] [ 84.597479][ T5386] Allocated by task 5386: [ 84.603840][ T5386] kasan_save_track+0x3f/0x80 [ 84.609401][ T5386] __kasan_kmalloc+0x98/0xb0 [ 84.617701][ T5386] __kmalloc_cache_noprof+0x19c/0x2c0 [ 84.623298][ T5386] squashfs_page_actor_init_special+0x64/0x440 [ 84.630881][ T5386] squashfs_readahead+0x188f/0x2680 [ 84.637710][ T5386] read_pages+0x17e/0x840 [ 84.642190][ T5386] page_cache_ra_unbounded+0x6ce/0x7f0 [ 84.648848][ T5386] filemap_get_pages+0x543/0x2330 [ 84.654188][ T5386] filemap_read+0x457/0xfa0 [ 84.658812][ T5386] __kernel_read+0x532/0x9f0 [ 84.664064][ T5386] integrity_kernel_read+0xb0/0x100 [ 84.669544][ T5386] ima_calc_file_hash+0xaef/0x1b30 [ 84.674811][ T5386] ima_collect_measurement+0x526/0xb20 [ 84.680813][ T5386] process_measurement+0x1357/0x1fb0 [ 84.687534][ T5386] ima_file_check+0xf2/0x170 [ 84.692863][ T5386] security_file_post_open+0xb9/0x280 [ 84.698283][ T5386] path_openat+0x2cd0/0x3590 [ 84.703506][ T5386] do_filp_open+0x235/0x490 [ 84.709500][ T5386] do_sys_openat2+0x13e/0x1d0 [ 84.714662][ T5386] __x64_sys_openat+0x247/0x2a0 [ 84.720533][ T5386] do_syscall_64+0xf3/0x230 [ 84.726461][ T5386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.732706][ T5386] [ 84.735360][ T5386] Freed by task 5386: [ 84.740156][ T5386] kasan_save_track+0x3f/0x80 [ 84.747041][ T5386] kasan_save_free_info+0x40/0x50 [ 84.752086][ T5386] __kasan_slab_free+0x59/0x70 [ 84.757265][ T5386] kfree+0x196/0x3e0 [ 84.761615][ T5386] squashfs_readahead+0x195b/0x2680 [ 84.767008][ T5386] read_pages+0x17e/0x840 [ 84.771629][ T5386] page_cache_ra_unbounded+0x6ce/0x7f0 [ 84.778723][ T5386] filemap_get_pages+0x543/0x2330 [ 84.785325][ T5386] filemap_read+0x457/0xfa0 [ 84.791190][ T5386] __kernel_read+0x532/0x9f0 [ 84.796240][ T5386] integrity_kernel_read+0xb0/0x100 [ 84.801534][ T5386] ima_calc_file_hash+0xaef/0x1b30 [ 84.806641][ T5386] ima_collect_measurement+0x526/0xb20 [ 84.812372][ T5386] process_measurement+0x1357/0x1fb0 [ 84.817673][ T5386] ima_file_check+0xf2/0x170 [ 84.822562][ T5386] security_file_post_open+0xb9/0x280 [ 84.828300][ T5386] path_openat+0x2cd0/0x3590 [ 84.833625][ T5386] do_filp_open+0x235/0x490 [ 84.839596][ T5386] do_sys_openat2+0x13e/0x1d0 [ 84.844466][ T5386] __x64_sys_openat+0x247/0x2a0 [ 84.850264][ T5386] do_syscall_64+0xf3/0x230 [ 84.856745][ T5386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.863809][ T5386] [ 84.866249][ T5386] The buggy address belongs to the object at ffff88807f1f9a80 [ 84.866249][ T5386] which belongs to the cache kmalloc-96 of size 96 [ 84.880966][ T5386] The buggy address is located 64 bytes inside of [ 84.880966][ T5386] freed 96-byte region [ffff88807f1f9a80, ffff88807f1f9ae0) [ 84.895003][ T5386] [ 84.897345][ T5386] The buggy address belongs to the physical page: [ 84.905519][ T5386] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7f1f9 [ 84.917320][ T5386] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 84.926151][ T5386] page_type: 0xfdffffff(slab) [ 84.932196][ T5386] raw: 00fff00000000000 ffff888015841280 dead000000000122 0000000000000000 [ 84.941561][ T5386] raw: 0000000000000000 0000000080200020 00000001fdffffff 0000000000000000 [ 84.950846][ T5386] page dumped because: kasan: bad access detected [ 84.957558][ T5386] page_owner tracks the page as allocated [ 84.964497][ T5386] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5392, tgid 5387 (syz.2.21), ts 83927514197, free_ts 78142713077 [ 84.983421][ T5386] post_alloc_hook+0x1f3/0x230 [ 84.988389][ T5386] get_page_from_freelist+0x3131/0x3280 [ 84.993940][ T5386] __alloc_pages_noprof+0x29e/0x780 [ 84.999132][ T5386] alloc_slab_page+0x5f/0x120 [ 85.003812][ T5386] allocate_slab+0x5a/0x2f0 [ 85.008345][ T5386] ___slab_alloc+0xcd1/0x14b0 [ 85.013225][ T5386] __slab_alloc+0x58/0xa0 [ 85.017552][ T5386] __kmalloc_cache_noprof+0x1d5/0x2c0 [ 85.023009][ T5386] cgroup_init_fs_context+0x58/0x430 [ 85.028387][ T5386] alloc_fs_context+0x68a/0x800 [ 85.033331][ T5386] do_new_mount+0x160/0xb40 [ 85.037934][ T5386] __se_sys_mount+0x2d6/0x3c0 [ 85.042602][ T5386] do_syscall_64+0xf3/0x230 [ 85.047111][ T5386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.052996][ T5386] page last free pid 5358 tgid 5356 stack trace: [ 85.059316][ T5386] free_unref_page+0xc07/0xd90 [ 85.064093][ T5386] rcu_core+0xaaa/0x17a0 [ 85.068329][ T5386] handle_softirqs+0x2c5/0x980 [ 85.073124][ T5386] __irq_exit_rcu+0xf4/0x1c0 [ 85.077793][ T5386] irq_exit_rcu+0x9/0x30 [ 85.082044][ T5386] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 85.087695][ T5386] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 85.094367][ T5386] [ 85.096674][ T5386] Memory state around the buggy address: [ 85.102545][ T5386] ffff88807f1f9980: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 85.110608][ T5386] ffff88807f1f9a00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 85.118678][ T5386] >ffff88807f1f9a80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 85.126743][ T5386] ^ [ 85.132884][ T5386] ffff88807f1f9b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 85.141127][ T5386] ffff88807f1f9b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 85.149256][ T5386] ================================================================== [ 85.182741][ T5239] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 85.189988][ T5386] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 85.197207][ T5386] CPU: 1 UID: 0 PID: 5386 Comm: syz.1.20 Not tainted 6.11.0-rc4-next-20240822-syzkaller #0 [ 85.207362][ T5386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 85.217433][ T5386] Call Trace: [ 85.220705][ T5386] [ 85.223626][ T5386] dump_stack_lvl+0x241/0x360 [ 85.228303][ T5386] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.233510][ T5386] ? __pfx__printk+0x10/0x10 [ 85.238091][ T5386] ? preempt_schedule+0xe1/0xf0 [ 85.242932][ T5386] ? vscnprintf+0x5d/0x90 [ 85.247262][ T5386] panic+0x349/0x880 [ 85.251147][ T5386] ? check_panic_on_warn+0x21/0xb0 [ 85.256246][ T5386] ? __pfx_panic+0x10/0x10 [ 85.260837][ T5386] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 85.266825][ T5386] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 85.273241][ T5386] ? print_report+0x502/0x550 [ 85.277947][ T5386] check_panic_on_warn+0x86/0xb0 [ 85.282887][ T5386] ? squashfs_readahead+0x210c/0x2680 [ 85.288352][ T5386] end_report+0x77/0x160 [ 85.292609][ T5386] kasan_report+0x154/0x180 [ 85.297216][ T5386] ? squashfs_readahead+0x210c/0x2680 [ 85.302589][ T5386] squashfs_readahead+0x210c/0x2680 [ 85.307796][ T5386] ? squashfs_readahead+0x6f0/0x2680 [ 85.313106][ T5386] ? __pfx_squashfs_readahead+0x10/0x10 [ 85.318658][ T5386] ? blk_start_plug+0x70/0x1b0 [ 85.323554][ T5386] read_pages+0x17e/0x840 [ 85.327900][ T5386] ? percpu_ref_put+0x19/0x180 [ 85.332752][ T5386] ? __pfx_read_pages+0x10/0x10 [ 85.337612][ T5386] ? filemap_add_folio+0x26d/0x650 [ 85.342721][ T5386] ? __pfx_filemap_add_folio+0x10/0x10 [ 85.348180][ T5386] page_cache_ra_unbounded+0x6ce/0x7f0 [ 85.353639][ T5386] filemap_get_pages+0x543/0x2330 [ 85.358670][ T5386] ? __pfx_filemap_get_pages+0x10/0x10 [ 85.364132][ T5386] ? __pfx___might_resched+0x10/0x10 [ 85.369422][ T5386] ? unwind_next_frame+0x18e6/0x22d0 [ 85.374712][ T5386] filemap_read+0x457/0xfa0 [ 85.379301][ T5386] ? __pfx_filemap_read+0x10/0x10 [ 85.384410][ T5386] ? iov_iter_kvec+0x4e/0x180 [ 85.389082][ T5386] __kernel_read+0x532/0x9f0 [ 85.393663][ T5386] ? do_sys_openat2+0x13e/0x1d0 [ 85.398549][ T5386] ? __x64_sys_openat+0x247/0x2a0 [ 85.403681][ T5386] ? __pfx___kernel_read+0x10/0x10 [ 85.408812][ T5386] integrity_kernel_read+0xb0/0x100 [ 85.414008][ T5386] ? __pfx_integrity_kernel_read+0x10/0x10 [ 85.419906][ T5386] ? ima_calc_file_hash+0xab7/0x1b30 [ 85.425205][ T5386] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 85.430745][ T5386] ima_calc_file_hash+0xaef/0x1b30 [ 85.435851][ T5386] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 85.442191][ T5386] ? lockdep_hardirqs_on+0x99/0x150 [ 85.447632][ T5386] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 85.453202][ T5386] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 85.459098][ T5386] ? __x64_sys_openat+0x247/0x2a0 [ 85.464119][ T5386] ? do_syscall_64+0xf3/0x230 [ 85.468786][ T5386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.474851][ T5386] ? mark_lock+0x9a/0x360 [ 85.479171][ T5386] ? make_vfsgid+0x46/0x90 [ 85.483635][ T5386] ? generic_fillattr+0x59c/0x840 [ 85.488668][ T5386] ima_collect_measurement+0x526/0xb20 [ 85.494222][ T5386] ? __pfx_ima_collect_measurement+0x10/0x10 [ 85.500297][ T5386] ? squashfs_xattr_handler_get+0x585/0x900 [ 85.506182][ T5386] ? trace_contention_end+0x3c/0x120 [ 85.511455][ T5386] ? __mutex_lock+0x2ef/0xd70 [ 85.516118][ T5386] ? ima_get_hash_algo+0x156/0x4d0 [ 85.521218][ T5386] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 85.526689][ T5386] process_measurement+0x1357/0x1fb0 [ 85.532058][ T5386] ? __pfx_process_measurement+0x10/0x10 [ 85.537821][ T5386] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 85.545997][ T5386] ? __pfx_apparmor_file_open+0x10/0x10 [ 85.552340][ T5386] ? tomoyo_file_open+0x168/0x220 [ 85.557878][ T5386] ? inode_to_bdi+0x69/0xf0 [ 85.562836][ T5386] ? apparmor_current_getsecid_subj+0xde/0x1b0 [ 85.569123][ T5386] ima_file_check+0xf2/0x170 [ 85.574065][ T5386] ? __pfx_ima_file_check+0x10/0x10 [ 85.579650][ T5386] security_file_post_open+0xb9/0x280 [ 85.585236][ T5386] path_openat+0x2cd0/0x3590 [ 85.589848][ T5386] ? __pfx_path_openat+0x10/0x10 [ 85.594907][ T5386] do_filp_open+0x235/0x490 [ 85.599553][ T5386] ? __pfx_do_filp_open+0x10/0x10 [ 85.604966][ T5386] ? _raw_spin_unlock+0x28/0x50 [ 85.610025][ T5386] ? alloc_fd+0x5a1/0x640 [ 85.614370][ T5386] do_sys_openat2+0x13e/0x1d0 [ 85.619796][ T5386] ? __pfx_do_sys_openat2+0x10/0x10 [ 85.625468][ T5386] __x64_sys_openat+0x247/0x2a0 [ 85.631062][ T5386] ? __pfx___x64_sys_openat+0x10/0x10 [ 85.636446][ T5386] ? do_syscall_64+0x100/0x230 [ 85.641306][ T5386] ? do_syscall_64+0xb6/0x230 [ 85.646527][ T5386] do_syscall_64+0xf3/0x230 [ 85.651745][ T5386] ? clear_bhb_loop+0x35/0x90 [ 85.656430][ T5386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.662433][ T5386] RIP: 0033:0x7f8c81779e79 [ 85.666879][ T5386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.686601][ T5386] RSP: 002b:00007f8c8261a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 85.695014][ T5386] RAX: ffffffffffffffda RBX: 00007f8c81916058 RCX: 00007f8c81779e79 [ 85.702981][ T5386] RDX: 0000000000000000 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 85.711113][ T5386] RBP: 00007f8c817e7916 R08: 0000000000000000 R09: 0000000000000000 [ 85.719091][ T5386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.727080][ T5386] R13: 0000000000000000 R14: 00007f8c81916058 R15: 00007fff0f3deb48 [ 85.735045][ T5386] [ 85.738803][ T5386] Kernel Offset: disabled [ 85.743117][ T5386] Rebooting in 86400 seconds..