last executing test programs: 11.821902309s ago: executing program 0 (id=30): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f00000005c0)={[{@errors_remount}, {@acl}]}, 0x1, 0x7bc, &(0x7f0000001740)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) syz_io_uring_setup(0x3c0c, &(0x7f0000000400)={0x0, 0xc890, 0x4000}, 0x0, 0x0) 10.799250702s ago: executing program 0 (id=41): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c200000086082b9827c186dd60cb3e0200403a00fc020000000000000000000000000000ff02000000030000000000000000000104009078000000000500007500001100fe880000000000000000000000000001fe8000000000000000000000000000aa00010000000000000106000000000000"], 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) syz_emit_ethernet(0x76, &(0x7f0000000140)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x40, 0x3a, 0xff, @remote, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0x30, '\x00', {0xd, 0x6, '])k', 0x800, 0x2b, 0xff, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@srh={0x2f, 0x0, 0x4, 0x0, 0x5, 0x0, 0x9}, @hopopts={0x8}]}}}}}}}, 0x0) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180), &(0x7f0000000040), 0x1d4, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f\x00\x00\x00'], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x62040200) 9.21849246s ago: executing program 0 (id=45): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0)="010000000037a788a11d18000000000000006923c63a4541062101b60a2156566de77062", 0x24, r1) 8.530716876s ago: executing program 0 (id=48): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) listxattr(0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1fc, 0x400, 0xfffffc80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x200, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x20000000, 0x0, 0x0, 0x0, 0x1000, 0xfffffffe, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x6, 0x0, 0x800, 0x6, 0x0, 0x0, 0x276, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x7, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x409, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1000, 0x0, 0x101, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x2, 0x6}, {0xff}}}]}}]}, 0x45c}}, 0x0) 6.76710955s ago: executing program 0 (id=49): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x5, 0x0, 0x0) pipe2(0x0, 0x80000) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(&(0x7f0000000500)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000006c0)='ns/net\x00') socket$netlink(0x10, 0x3, 0x4) 6.336056275s ago: executing program 2 (id=52): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) llistxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 5.865860513s ago: executing program 1 (id=53): getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, &(0x7f0000000280)) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) 5.865413783s ago: executing program 2 (id=54): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000050000000004000009000000010000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1fc, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x47fa, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_clone(0x2000000, &(0x7f0000000000), 0x0, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000a00)='fib_table_lookup\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffff53a2513743897e44000d0001007564703a"], 0x54}}, 0x0) 5.436299158s ago: executing program 0 (id=56): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c200000086082b9827c186dd60cb3e0200403a00fc020000000000000000000000000000ff02000000030000000000000000000104009078000000000500007500001100fe880000000000000000000000000001fe8000000000000000000000000000aa00010000000000000106000000000000"], 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) syz_emit_ethernet(0x76, &(0x7f0000000140)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x40, 0x3a, 0xff, @remote, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0x30, '\x00', {0xd, 0x6, '])k', 0x800, 0x2b, 0xff, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@srh={0x2f, 0x0, 0x4, 0x0, 0x5, 0x0, 0x9}, @hopopts={0x8}]}}}}}}}, 0x0) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180), &(0x7f0000000040), 0x1d4, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f\x00\x00\x00'], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x62040200) 4.504117814s ago: executing program 2 (id=59): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000380)='neigh_update\x00', r0}, 0x10) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 4.076837798s ago: executing program 2 (id=60): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) get_robust_list(0x0, 0x0, 0x0) 3.914086492s ago: executing program 2 (id=61): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000580)=""/244, 0xf4}], 0x1) 3.243106546s ago: executing program 1 (id=63): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) unshare(0x4000680) bpf$MAP_CREATE(0x0, 0x0, 0x0) tkill(0x0, 0xa) kexec_load(0x4, 0xa, 0x0, 0x0) 2.933871962s ago: executing program 3 (id=65): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xeb48195b69e85694, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x5}, 0x18) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r2, 0x0, 0x0, 0x0) 2.21566194s ago: executing program 1 (id=66): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x5, 0x0, 0x0) pipe2(0x0, 0x80000) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(&(0x7f0000000500)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000006c0)='ns/net\x00') socket$netlink(0x10, 0x3, 0x4) 2.164982444s ago: executing program 3 (id=67): bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[], 0x50) socket(0x25, 0x1, 0x0) r0 = syz_io_uring_setup(0x23e7, &(0x7f0000000000)={0x0, 0xec25, 0x0, 0x2, 0x40000333}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd_index=0x4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001800)=""/211, 0xd3}], 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 2.114233838s ago: executing program 4 (id=68): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) listen(r0, 0x3) 1.980547009s ago: executing program 3 (id=69): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x0, 0x24c, 0x6, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000040000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) 1.889878416s ago: executing program 4 (id=70): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000050000000004000009000000010000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1fc, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x47fa, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_clone(0x2000000, &(0x7f0000000000), 0x0, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000a00)='fib_table_lookup\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffff53a2513743897e44000d0001007564703a"], 0x54}}, 0x0) 1.820377872s ago: executing program 3 (id=71): unshare(0x22020600) setns(0xffffffffffffffff, 0x24020000) 1.664987265s ago: executing program 3 (id=72): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f0000000500), &(0x7f00000002c0)=r0}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0x3}, 0x28) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4}, 0x18) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000400)='.\x00', 0xa4000021) close(r5) syz_genetlink_get_family_id$netlbl_cipso(0x0, r3) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newsa={0x138, 0x10, 0x1, 0x70bd28, 0x0, {{@in6=@empty, @in=@empty, 0x0, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0xffffffffffffffff}, {@in=@multicast1, 0x0, 0x6c}, @in6=@rand_addr=' \x01\x00', {}, {0x5, 0x0, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x67}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") open(0x0, 0x60142, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abfe0055acc8ef039a5be42200000000000000000100", 0x38}, 0x60) bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) 1.552696414s ago: executing program 4 (id=73): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) io_setup(0x2, &(0x7f0000002400)) 1.132331258s ago: executing program 1 (id=74): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00"/11], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r0) 981.97727ms ago: executing program 3 (id=75): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x7}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0\x00'}) 944.491683ms ago: executing program 1 (id=76): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x2, 0x400000000000003, 0x20, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @remote}}]}, 0x50}}, 0x0) 839.641972ms ago: executing program 4 (id=77): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, 0x0, 0x0) 373.904349ms ago: executing program 1 (id=78): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000000)={0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x7}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x103ff}) 373.607719ms ago: executing program 2 (id=79): bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB], 0x50) socket(0x25, 0x1, 0x0) r0 = syz_io_uring_setup(0x23e7, &(0x7f0000000000)={0x0, 0xec25, 0x0, 0x2, 0x40000333}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd_index=0x4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001800)=""/211, 0xd3}], 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 338.210602ms ago: executing program 4 (id=80): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) semget(0x0, 0x1, 0x202) 0s ago: executing program 4 (id=81): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x103940) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000180)={0x80, 0xc, 0x2, 0xffffffff, 0x0, 0x2}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.239' (ED25519) to the list of known hosts. [ 64.788621][ T4172] cgroup: Unknown subsys name 'net' [ 64.900495][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.488451][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 68.717181][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 68.843654][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 68.868151][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 68.925766][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.934647][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.943175][ T4192] device bridge_slave_0 entered promiscuous mode [ 68.957712][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.965521][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.974124][ T4192] device bridge_slave_1 entered promiscuous mode [ 68.993992][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 69.019914][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 69.075331][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.102057][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.109198][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.117471][ T4193] device bridge_slave_0 entered promiscuous mode [ 69.129173][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.137174][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.145314][ T4193] device bridge_slave_1 entered promiscuous mode [ 69.154232][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.246820][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.254491][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.262627][ T4183] device bridge_slave_0 entered promiscuous mode [ 69.272462][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.284668][ T4192] team0: Port device team_slave_0 added [ 69.295276][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.302514][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.310944][ T4191] device bridge_slave_0 entered promiscuous mode [ 69.318584][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.325821][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.334012][ T4183] device bridge_slave_1 entered promiscuous mode [ 69.343068][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.354269][ T4192] team0: Port device team_slave_1 added [ 69.375865][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.383044][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.391527][ T4191] device bridge_slave_1 entered promiscuous mode [ 69.423984][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.431430][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.439886][ T4182] device bridge_slave_0 entered promiscuous mode [ 69.478921][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.486651][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.495031][ T4182] device bridge_slave_1 entered promiscuous mode [ 69.511838][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.523662][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.535164][ T4193] team0: Port device team_slave_0 added [ 69.542744][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.550483][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.577251][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.599566][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.617904][ T4193] team0: Port device team_slave_1 added [ 69.632968][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.640630][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.667384][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.687853][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.720503][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.746031][ T4183] team0: Port device team_slave_0 added [ 69.752991][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.760758][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.788213][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.800889][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.807944][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.834695][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.847586][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.880414][ T4183] team0: Port device team_slave_1 added [ 69.888285][ T4191] team0: Port device team_slave_0 added [ 69.917609][ T4191] team0: Port device team_slave_1 added [ 69.941167][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.948279][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.975403][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.998669][ T4192] device hsr_slave_0 entered promiscuous mode [ 70.006209][ T4192] device hsr_slave_1 entered promiscuous mode [ 70.022794][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.029775][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.057720][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.071936][ T4182] team0: Port device team_slave_0 added [ 70.110059][ T4182] team0: Port device team_slave_1 added [ 70.125927][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.133314][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.159845][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.183656][ T4193] device hsr_slave_0 entered promiscuous mode [ 70.190912][ T4193] device hsr_slave_1 entered promiscuous mode [ 70.197779][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.205721][ T4193] Cannot create hsr debugfs directory [ 70.228307][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.235812][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.264510][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.295662][ T4183] device hsr_slave_0 entered promiscuous mode [ 70.303480][ T4183] device hsr_slave_1 entered promiscuous mode [ 70.311049][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.319147][ T4183] Cannot create hsr debugfs directory [ 70.345483][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.352524][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.379221][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.392273][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.399258][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.426617][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.427108][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 70.437616][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 70.444708][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 70.456393][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 70.467343][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 70.597814][ T4191] device hsr_slave_0 entered promiscuous mode [ 70.605477][ T4191] device hsr_slave_1 entered promiscuous mode [ 70.612604][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.620957][ T4191] Cannot create hsr debugfs directory [ 70.641599][ T4182] device hsr_slave_0 entered promiscuous mode [ 70.648606][ T4182] device hsr_slave_1 entered promiscuous mode [ 70.655650][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.667210][ T4182] Cannot create hsr debugfs directory [ 70.881650][ T4192] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.927287][ T4192] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.937712][ T4192] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.954250][ T4192] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.026053][ T4183] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.038993][ T4183] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.056452][ T4183] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.081917][ T4183] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.116724][ T4193] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.127024][ T4193] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.140911][ T4193] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.161345][ T4193] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.189596][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.241642][ T4191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.253636][ T4191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.265734][ T4191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.277006][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.286971][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.300359][ T4191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.326286][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.376803][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.386429][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.395952][ T1235] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.404362][ T1235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.414033][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.426702][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.437492][ T1235] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.444673][ T1235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.454926][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.466309][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.496146][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.515142][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.526230][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.538079][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.544900][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.554582][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.589147][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.600752][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.609195][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.617896][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.626254][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.635590][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.669928][ T4182] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.679372][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.688852][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.698492][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.707327][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.717169][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.726478][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.735395][ T1235] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.742537][ T1235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.756087][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.770713][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.779414][ T4182] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.796495][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.805033][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.815646][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.824861][ T1235] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.831990][ T1235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.840447][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.855907][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.864970][ T4182] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.878194][ T4182] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.897680][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.906304][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.915346][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.929192][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.938734][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.947739][ T1235] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.955040][ T1235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.971425][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.999457][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.017147][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.042401][ T4183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.052957][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.070689][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.078728][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.088128][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.097722][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.106775][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.115713][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.124161][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.132863][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.143230][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.152065][ T1235] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.159173][ T1235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.167312][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.184024][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.201013][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.253157][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.268895][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.279210][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.310611][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.317756][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.326272][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.336638][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.344851][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.353826][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.367311][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.377307][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.393402][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.401125][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.415343][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.436393][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.460420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.469692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.486432][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.493693][ T4254] Bluetooth: hci0: command 0x041b tx timeout [ 72.501254][ T4254] Bluetooth: hci3: command 0x041b tx timeout [ 72.507442][ T4254] Bluetooth: hci1: command 0x041b tx timeout [ 72.526166][ T4254] Bluetooth: hci2: command 0x041b tx timeout [ 72.532460][ T4254] Bluetooth: hci4: command 0x041b tx timeout [ 72.549023][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.558447][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.574140][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.581417][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.595969][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.608499][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.617969][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.625438][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.665683][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.679645][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.695118][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.707863][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.721229][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.731589][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.739375][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.747281][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.758072][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.767430][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.793124][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.803857][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.813963][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.823442][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.833663][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.842548][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.851948][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.860777][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.871307][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.889529][ T4192] device veth0_vlan entered promiscuous mode [ 72.916184][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.934663][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.944909][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.954984][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.964020][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.982708][ T4192] device veth1_vlan entered promiscuous mode [ 73.027210][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.037893][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.085107][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.101115][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.120436][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.130500][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.142528][ T4192] device veth0_macvtap entered promiscuous mode [ 73.161965][ T4192] device veth1_macvtap entered promiscuous mode [ 73.172625][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.180626][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.197678][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.207619][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.224208][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.278819][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.296410][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.307436][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.319144][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.326494][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.334968][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.344103][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.353215][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.360381][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.368126][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.377238][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.387960][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.407308][ T4193] device veth0_vlan entered promiscuous mode [ 73.423493][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.442386][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.451995][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.464422][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.473951][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.483369][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.494506][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.503750][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.523821][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.532205][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.541383][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.553391][ T4192] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.563091][ T4192] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.574156][ T4192] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.583131][ T4192] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.600466][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.609159][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.619479][ T4193] device veth1_vlan entered promiscuous mode [ 73.648756][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.658276][ T4183] device veth0_vlan entered promiscuous mode [ 73.667619][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.676360][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.685264][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.695438][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.703932][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.714476][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.723497][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.732859][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.742504][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.751301][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.760348][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.768022][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.777303][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.823379][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.832904][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.848069][ T4183] device veth1_vlan entered promiscuous mode [ 73.887245][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.898794][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.907954][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.917099][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.926758][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.936431][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.954900][ T4193] device veth0_macvtap entered promiscuous mode [ 74.037627][ T4193] device veth1_macvtap entered promiscuous mode [ 74.058000][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.066962][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.077289][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.086212][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.095581][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.113517][ T4191] device veth0_vlan entered promiscuous mode [ 74.132436][ T4266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.161540][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.178541][ T4266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.181299][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.191765][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.215435][ T4191] device veth1_vlan entered promiscuous mode [ 74.235316][ T4183] device veth0_macvtap entered promiscuous mode [ 74.257052][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.268180][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.283079][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.293621][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.302837][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.313127][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.323061][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.335877][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.348590][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.360941][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.374379][ T4183] device veth1_macvtap entered promiscuous mode [ 74.383509][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.394504][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.402521][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.404077][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.421233][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.430327][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.438232][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.446447][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.457859][ T4193] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.474818][ T4193] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.483923][ T4193] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.493419][ T4193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.544638][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.571211][ T4254] Bluetooth: hci4: command 0x040f tx timeout [ 74.577590][ T4254] Bluetooth: hci2: command 0x040f tx timeout [ 74.582603][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.591561][ T4254] Bluetooth: hci1: command 0x040f tx timeout [ 74.609391][ T4254] Bluetooth: hci3: command 0x040f tx timeout [ 74.610821][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.618406][ T4254] Bluetooth: hci0: command 0x040f tx timeout [ 74.642858][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.654253][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.666252][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.688480][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.704361][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.716411][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.768393][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.778451][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.790634][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.803081][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.814936][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.825714][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.842039][ T26] audit: type=1326 audit(1754424463.836:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4293 comm="syz.0.1" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f65bb6f3b69 code=0x0 [ 74.843139][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.881637][ T4191] device veth0_macvtap entered promiscuous mode [ 74.894714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.907261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.917441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.967099][ T4183] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.979976][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.987973][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.002906][ T4183] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.015170][ T4183] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.026690][ T4183] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.045317][ T4191] device veth1_macvtap entered promiscuous mode [ 75.085056][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.103474][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.113548][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.173600][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.215164][ T4182] device veth0_vlan entered promiscuous mode [ 75.225391][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.253231][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.276191][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.301623][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.394001][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.430671][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.479195][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.507210][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.517818][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.534988][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.546654][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.680086][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.706375][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.728507][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.750784][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.775112][ T4182] device veth1_vlan entered promiscuous mode [ 75.797809][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.813226][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.825589][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.842074][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.857878][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.871486][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.888977][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.924158][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.941471][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.960782][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.973593][ T4308] loop3: detected capacity change from 0 to 1024 [ 75.993475][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.002868][ T1235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.031667][ T1235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.039715][ T4308] EXT4-fs (loop3): Ignoring removed orlov option [ 76.047616][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.060267][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.069409][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.116801][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.155643][ T4308] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,auto_da_alloc,sysvgroups,norecovery,jqfmt=vfsv0,orlov,nogrpid,noauto_da_alloc,user_xattr,,errors=continue. Quota mode: none. [ 76.259270][ T4182] device veth0_macvtap entered promiscuous mode [ 76.309730][ T26] audit: type=1800 audit(1754424465.296:3): pid=4308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 76.358825][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.381979][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.404710][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.541048][ T4182] device veth1_macvtap entered promiscuous mode [ 76.608808][ T4266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.650604][ T1107] Bluetooth: hci0: command 0x0419 tx timeout [ 76.666330][ T4266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.695254][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.766094][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.788665][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.813757][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.849910][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.878633][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.907880][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.938754][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.981976][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.005114][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.013123][ T1107] Bluetooth: hci3: command 0x0419 tx timeout [ 77.019248][ T1107] Bluetooth: hci1: command 0x0419 tx timeout [ 77.025398][ T1107] Bluetooth: hci2: command 0x0419 tx timeout [ 77.031900][ T1107] Bluetooth: hci4: command 0x0419 tx timeout [ 77.043948][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.052559][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.061576][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.161252][ T4316] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.205769][ T1235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.219131][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.248497][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.268550][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.289642][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.311385][ T1235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.333237][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.368021][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.397545][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.423141][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.442545][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.241711][ T4325] loop4: detected capacity change from 0 to 1024 [ 78.284530][ T4325] ======================================================= [ 78.284530][ T4325] WARNING: The mand mount option has been deprecated and [ 78.284530][ T4325] and is ignored by this kernel. Remove the mand [ 78.284530][ T4325] option from the mount to silence this warning. [ 78.284530][ T4325] ======================================================= [ 79.269390][ T4319] sched: RT throttling activated [ 79.350271][ T4325] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 79.448146][ T4316] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.472672][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.473965][ T4325] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3876: comm syz.4.5: Allocating blocks 465-513 which overlap fs metadata [ 79.482619][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.503985][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.569514][ T4316] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.592518][ T4324] EXT4-fs (loop4): pa ffff8880740f92a0: logic 1, phys. 145, len 23 [ 79.601356][ T4324] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 3 [ 79.620449][ T4182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.639546][ T4182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.669431][ T4182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.689134][ T4182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.843694][ T4316] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.131968][ T4333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11'. [ 80.891417][ T4316] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.910135][ T4316] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.925360][ T4316] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.940497][ T4316] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.248106][ T4337] loop0: detected capacity change from 0 to 128 [ 81.256124][ T4266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.281140][ T4266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.344331][ T4322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.368444][ T4333] syz.4.11 (4333) used greatest stack depth: 20672 bytes left [ 81.397750][ T4322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.460935][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.522052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.533546][ T1235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.591008][ T1235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.600327][ T4337] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,acl,,errors=continue. Quota mode: writeback. [ 81.644483][ T4337] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.759167][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.903415][ T4345] loop4: detected capacity change from 0 to 512 [ 82.069256][ T4345] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 82.160404][ T4345] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 82.266932][ T4345] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 82.392394][ T4345] EXT4-fs (loop4): 1 truncate cleaned up [ 82.398142][ T4345] EXT4-fs (loop4): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="bsdgroups,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback. [ 82.927217][ T4356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16'. [ 82.980214][ T4361] netlink: 64 bytes leftover after parsing attributes in process `syz.2.18'. [ 83.047284][ T4359] lo speed is unknown, defaulting to 1000 [ 83.055515][ T4361] netlink: 40 bytes leftover after parsing attributes in process `syz.2.18'. [ 83.141318][ T4359] lo speed is unknown, defaulting to 1000 [ 83.147423][ T4361] netlink: 40 bytes leftover after parsing attributes in process `syz.2.18'. [ 83.194201][ T4359] lo speed is unknown, defaulting to 1000 [ 83.282577][ T4359] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 83.328354][ T4359] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 83.367650][ T4359] lo speed is unknown, defaulting to 1000 [ 83.395369][ T4359] lo speed is unknown, defaulting to 1000 [ 83.405116][ T4359] lo speed is unknown, defaulting to 1000 [ 83.423047][ T4359] lo speed is unknown, defaulting to 1000 [ 83.482278][ T4359] lo speed is unknown, defaulting to 1000 [ 83.516049][ T4367] hub 9-0:1.0: USB hub found [ 83.567037][ T4367] hub 9-0:1.0: 1 port detected [ 83.610369][ T4369] serio: Serial port ttyS3 [ 83.825632][ T26] audit: type=1326 audit(1754424472.816:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4371 comm="syz.0.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65bb6f3b69 code=0x7ffc0000 [ 83.907420][ T4374] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #2: block 4: comm syz.4.14: lblock 0 mapped to illegal pblock 4 (length 1) [ 83.928895][ T26] audit: type=1326 audit(1754424472.816:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4371 comm="syz.0.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65bb6f3b69 code=0x7ffc0000 [ 83.959859][ T4372] loop0: detected capacity change from 0 to 512 [ 84.027456][ T26] audit: type=1326 audit(1754424472.866:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4371 comm="syz.0.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65bb6f3b69 code=0x7ffc0000 [ 84.054985][ T4372] EXT4-fs (loop0): Ignoring removed orlov option [ 84.088966][ T26] audit: type=1326 audit(1754424472.866:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4371 comm="syz.0.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65bb6f3b69 code=0x7ffc0000 [ 84.118116][ T4374] EXT4-fs (loop4): Remounting filesystem read-only [ 84.132211][ T26] audit: type=1326 audit(1754424472.866:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4371 comm="syz.0.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65bb6f3b69 code=0x7ffc0000 [ 84.144234][ T4372] EXT4-fs (loop0): orphan cleanup on readonly fs [ 84.180022][ T26] audit: type=1326 audit(1754424472.866:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4371 comm="syz.0.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65bb6f3b69 code=0x7ffc0000 [ 84.205073][ T26] audit: type=1326 audit(1754424472.866:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4371 comm="syz.0.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65bb6f3b69 code=0x7ffc0000 [ 84.227957][ T26] audit: type=1326 audit(1754424472.866:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4371 comm="syz.0.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65bb6f3b69 code=0x7ffc0000 [ 84.252934][ T26] audit: type=1326 audit(1754424472.866:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4371 comm="syz.0.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65bb6f3b69 code=0x7ffc0000 [ 84.286829][ T26] audit: type=1326 audit(1754424472.866:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4371 comm="syz.0.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65bb6f3b69 code=0x7ffc0000 [ 84.363296][ T4372] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.23: bg 0: block 248: padding at end of block bitmap is not set [ 84.490578][ T4372] EXT4-fs error (device loop0): ext4_acquire_dquot:6207: comm syz.0.23: Failed to acquire dquot type 1 [ 84.580093][ T4372] EXT4-fs (loop0): 1 truncate cleaned up [ 84.638537][ T4372] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,orlov,abort,nombcache,stripe=0x0000000000000010,,errors=continue. Quota mode: writeback. [ 84.803410][ T4372] EXT4-fs error (device loop0): ext4_remount:6033: comm syz.0.23: Abort forced by user [ 84.837781][ T4372] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback. [ 85.676728][ T4394] loop0: detected capacity change from 0 to 2048 [ 85.859538][ T4394] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,acl,. Quota mode: none. [ 86.358883][ T4409] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.542607][ T4409] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.897713][ T4409] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.171080][ T1325] cfg80211: failed to load regulatory.db [ 87.219206][ T4409] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.258069][ T4424] lo speed is unknown, defaulting to 1000 [ 87.461250][ T4409] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.476476][ T4409] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.491444][ T4409] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.506102][ T4409] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.429711][ T4434] loop1: detected capacity change from 0 to 512 [ 88.642249][ T4434] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 88.783632][ T4434] EXT4-fs (loop1): orphan cleanup on readonly fs [ 89.165704][ T4434] EXT4-fs error (device loop1): ext4_quota_enable:6415: inode #15: comm syz.1.46: iget: bad i_size value: 360287970189639690 [ 89.254579][ T4443] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 90.620081][ T4434] EXT4-fs error (device loop1): ext4_quota_enable:6418: comm syz.1.46: Bad quota inode: 15, type: 2 [ 90.731177][ T4434] EXT4-fs warning (device loop1): ext4_enable_quotas:6459: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 90.900145][ T4434] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 90.906976][ T4434] EXT4-fs (loop1): mounted filesystem without journal. Opts: noquota,noblock_validity,min_batch_time=0x000000000000082f,grpquota,debug,debug,grpid,,errors=continue. Quota mode: writeback. [ 91.089184][ T26] kauditd_printk_skb: 75 callbacks suppressed [ 91.089200][ T26] audit: type=1326 audit(1754424480.076:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4450 comm="syz.2.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fce5d5b69 code=0x7ffc0000 [ 91.156284][ T4451] tipc: Started in network mode [ 91.183775][ T4451] tipc: Node identity ac14140f, cluster identity 4711 [ 91.192609][ T26] audit: type=1326 audit(1754424480.146:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4450 comm="syz.2.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fce5d5b69 code=0x7ffc0000 [ 91.250293][ T4451] tipc: New replicast peer: 255.255.255.255 [ 91.256342][ T26] audit: type=1326 audit(1754424480.146:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4450 comm="syz.2.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fce5d5b69 code=0x7ffc0000 [ 91.318415][ T4451] tipc: Enabled bearer , priority 10 [ 91.334529][ T26] audit: type=1326 audit(1754424480.176:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4450 comm="syz.2.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fce5d5b69 code=0x7ffc0000 [ 91.478814][ T26] audit: type=1326 audit(1754424480.176:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4450 comm="syz.2.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fce5d5b69 code=0x7ffc0000 [ 91.710794][ T26] audit: type=1326 audit(1754424480.176:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4450 comm="syz.2.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fce5d5b69 code=0x7ffc0000 [ 91.912651][ T26] audit: type=1326 audit(1754424480.206:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4450 comm="syz.2.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fce5d5b69 code=0x7ffc0000 [ 91.941166][ T26] audit: type=1326 audit(1754424480.216:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4450 comm="syz.2.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fce5d5b69 code=0x7ffc0000 [ 91.980797][ T4457] tipc: Started in network mode [ 91.985738][ T4457] tipc: Node identity ac14140f, cluster identity 4711 [ 92.153563][ T4457] tipc: New replicast peer: 255.255.255.83 [ 92.212672][ T4457] tipc: Enabled bearer , priority 10 [ 92.481356][ T7] tipc: Node number set to 2886997007 [ 92.589377][ T26] audit: type=1326 audit(1754424480.216:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4450 comm="syz.2.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fce5d5b69 code=0x7ffc0000 [ 92.732326][ T26] audit: type=1326 audit(1754424480.216:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4450 comm="syz.2.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f6fce5d5b69 code=0x7ffc0000 [ 92.785216][ T4466] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.025964][ T4466] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.047506][ T4469] lo speed is unknown, defaulting to 1000 [ 93.085239][ T4473] netlink: 96 bytes leftover after parsing attributes in process `syz.2.59'. [ 93.271616][ T4466] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.332079][ T23] tipc: Node number set to 2886997007 [ 93.477761][ T4466] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.678856][ T4466] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.693718][ T4466] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.708541][ T4466] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.724372][ T4466] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.531972][ T4501] tipc: New replicast peer: 255.255.255.83 [ 95.568605][ T4501] tipc: Enabled bearer , priority 10 [ 95.879011][ T4506] loop3: detected capacity change from 0 to 2048 [ 95.968683][ T4506] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 96.110733][ T26] kauditd_printk_skb: 35 callbacks suppressed [ 96.110747][ T26] audit: type=1326 audit(1754424485.106:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4507 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5747801b69 code=0x7ffc0000 [ 97.140176][ T26] audit: type=1326 audit(1754424486.136:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4523 comm="syz.4.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5747801b69 code=0x7ffc0000 [ 97.399945][ T26] audit: type=1326 audit(1754424486.136:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4523 comm="syz.4.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f5747801b69 code=0x7ffc0000 [ 202.449783][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 202.457017][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4322/1:b..l [ 202.465704][ C0] (detected by 0, t=10503 jiffies, g=9001, q=49) [ 202.472277][ C0] task:kworker/u4:6 state:R running task stack:25728 pid: 4322 ppid: 2 flags:0x00004000 [ 202.484174][ C0] Workqueue: netns cleanup_net [ 202.489298][ C0] Call Trace: [ 202.492703][ C0] [ 202.495674][ C0] __schedule+0x11b8/0x43b0 [ 202.500223][ C0] ? mark_lock+0x94/0x320 [ 202.504592][ C0] ? mark_lock+0x94/0x320 [ 202.508958][ C0] ? release_firmware_map_entry+0x190/0x190 [ 202.514969][ C0] ? preempt_schedule_irq+0xa6/0x150 [ 202.520287][ C0] preempt_schedule_irq+0xb1/0x150 [ 202.525441][ C0] ? __cond_resched+0xb0/0xb0 [ 202.530385][ C0] ? rcu_is_watching+0x11/0xa0 [ 202.535204][ C0] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 202.541190][ C0] irqentry_exit+0x63/0x70 [ 202.545705][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 202.551766][ C0] RIP: 0010:lock_acquire+0x1f2/0x3f0 [ 202.557104][ C0] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f6 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 66 43 c7 44 3d 09 00 00 43 c6 44 3d 0b [ 202.577037][ C0] RSP: 0018:ffffc9000307f900 EFLAGS: 00000206 [ 202.583434][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: beec7a6520521900 [ 202.591460][ C0] RDX: 0000000000000000 RSI: ffffffff8a0b2860 RDI: ffffffff8a599340 [ 202.599825][ C0] RBP: ffffc9000307fa20 R08: dffffc0000000000 R09: fffffbfff1ff6e19 [ 202.608108][ C0] R10: fffffbfff1ff6e19 R11: 1ffffffff1ff6e18 R12: ffffffff8c11c360 [ 202.616389][ C0] R13: 1ffff9200060ff2c R14: 0000000000000246 R15: dffffc0000000000 [ 202.624589][ C0] ? rcu_lock_release+0x5/0x20 [ 202.629391][ C0] ? read_lock_is_recursive+0x10/0x10 [ 202.634801][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 202.639960][ C0] rcu_lock_acquire+0x2a/0x30 [ 202.644692][ C0] ? rcu_lock_acquire+0x5/0x30 [ 202.649485][ C0] inet_twsk_purge+0x119/0x810 [ 202.654397][ C0] ? __inet_twsk_schedule+0x130/0x130 [ 202.659801][ C0] ? iput+0x706/0x8a0 [ 202.663826][ C0] ? dccp_v6_exit_net+0x80/0x80 [ 202.668805][ C0] cleanup_net+0x77b/0xb80 [ 202.673354][ C0] ? ops_free_list+0x330/0x330 [ 202.678148][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 202.684080][ C0] ? _raw_spin_unlock+0x40/0x40 [ 202.689633][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 202.694890][ C0] process_one_work+0x863/0x1000 [ 202.700121][ C0] ? worker_detach_from_pool+0x240/0x240 [ 202.706625][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 202.712056][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 202.717755][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 202.723179][ C0] ? wq_worker_running+0x97/0x170 [ 202.728620][ C0] worker_thread+0xaa8/0x12a0 [ 202.733337][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 202.739796][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 202.745318][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 202.751438][ C0] kthread+0x436/0x520 [ 202.755897][ C0] ? rcu_lock_release+0x20/0x20 [ 202.760888][ C0] ? kthread_blkcg+0xd0/0xd0 [ 202.765526][ C0] ret_from_fork+0x1f/0x30 [ 202.770537][ C0] [ 202.773671][ C0] rcu: rcu_preempt kthread starved for 10534 jiffies! g9001 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 202.784979][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 202.795067][ C0] rcu: RCU grace-period kthread stack dump: [ 202.800974][ C0] task:rcu_preempt state:R running task stack:27464 pid: 15 ppid: 2 flags:0x00004000 [ 202.811905][ C0] Call Trace: [ 202.815577][ C0] [ 202.818682][ C0] __schedule+0x11b8/0x43b0 [ 202.823232][ C0] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 202.829185][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 202.835198][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 202.841403][ C0] ? _raw_spin_unlock+0x40/0x40 [ 202.846432][ C0] ? rcu_is_watching+0x11/0xa0 [ 202.852171][ C0] ? release_firmware_map_entry+0x190/0x190 [ 202.858362][ C0] schedule+0x11b/0x1e0 [ 202.862782][ C0] schedule_timeout+0x15c/0x280 [ 202.867769][ C0] ? console_conditional_schedule+0x40/0x40 [ 202.873901][ C0] ? update_process_times+0x200/0x200 [ 202.879319][ C0] ? prepare_to_swait_event+0x331/0x350 [ 202.884994][ C0] rcu_gp_fqs_loop+0x29e/0x11b0 [ 202.890074][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 202.895439][ C0] ? rcu_gp_init+0xd58/0x10e0 [ 202.901377][ C0] ? rcu_gp_init+0x10e0/0x10e0 [ 202.906588][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 202.912339][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 202.917664][ C0] rcu_gp_kthread+0x98/0x350 [ 202.922751][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 202.928135][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 202.934187][ C0] ? __kthread_parkme+0x157/0x1b0 [ 202.939249][ C0] kthread+0x436/0x520 [ 202.943353][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 202.948500][ C0] ? kthread_blkcg+0xd0/0xd0 [ 202.953132][ C0] ret_from_fork+0x1f/0x30 [ 202.957792][ C0] [ 202.961117][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 202.967654][ C0] Sending NMI from CPU 0 to CPUs 1: [ 202.973080][ C1] NMI backtrace for cpu 1 [ 202.973106][ C1] CPU: 1 PID: 4526 Comm: syz.1.78 Not tainted 5.15.189-syzkaller #0 [ 202.973124][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 202.973133][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 202.973158][ C1] Code: 66 2e 0f 1f 84 00 00 00 00 00 53 48 89 fb e8 17 00 00 00 48 8b 3d c0 ac f1 0b 48 89 de 5b e9 77 99 43 00 00 00 cc cc 00 00 cc <48> 8b 04 24 65 48 8b 0d 94 ab 8a 7e 65 8b 15 95 ab 8a 7e 81 e2 00 [ 202.973172][ C1] RSP: 0018:ffffc90000dd0c30 EFLAGS: 00000002 [ 202.973187][ C1] RAX: ffffffff814eb469 RBX: 0000000000000001 RCX: ffff888020518000 [ 202.973198][ C1] RDX: 0000000000010000 RSI: 0000000000000001 RDI: 0000000000000000 [ 202.973208][ C1] RBP: 0000000000000001 R08: dffffc0000000000 R09: fffffbfff1ff6e19 [ 202.973219][ C1] R10: fffffbfff1ff6e19 R11: 1ffffffff1ff6e18 R12: ffff88807c0e6ee0 [ 202.973230][ C1] R13: ffff888077ae5780 R14: ffff888020518648 R15: dffffc0000000000 [ 202.973243][ C1] FS: 0000555562c13500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 202.973257][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 202.973268][ C1] CR2: 000000110c3be2fb CR3: 000000001f3b1000 CR4: 00000000003506e0 [ 202.973281][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 202.973291][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 202.973300][ C1] Call Trace: [ 202.973306][ C1] [ 202.973312][ C1] lockdep_tasklist_lock_is_held+0x5/0x20 [ 202.973329][ C1] pid_task+0x72/0x140 [ 202.973348][ C1] send_sigqueue+0x155/0x620 [ 202.973367][ C1] posix_timer_fn+0x16a/0x3d0 [ 202.973388][ C1] __hrtimer_run_queues+0x53d/0xc40 [ 202.973411][ C1] ? common_timer_wait_running+0x10/0x10 [ 202.973435][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 202.973452][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 202.973472][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 202.973502][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 202.973519][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 202.973537][ C1] [ 202.973541][ C1] [ 202.973546][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 202.973564][ C1] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 202.973582][ C1] Code: f6 ff 0f 1f 00 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 7e db aa f7 48 89 df e8 46 b0 ab f7 e8 91 46 cc f7 fb bf 01 00 00 00 76 d4 9f f7 65 8b 05 17 d4 50 76 85 c0 74 02 5b c3 e8 c4 de 4e [ 202.973594][ C1] RSP: 0018:ffffc9000341fbc0 EFLAGS: 00000282 [ 202.973606][ C1] RAX: 442beb65143d7f00 RBX: ffff8880766a6f00 RCX: 442beb65143d7f00 [ 202.973618][ C1] RDX: dffffc0000000000 RSI: ffffffff8a0b15c0 RDI: 0000000000000001 [ 202.973629][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed100ecd4de1 [ 202.973640][ C1] R10: ffffed100ecd4de1 R11: 1ffff1100ecd4de0 R12: ffff8880766a6f00 [ 202.973652][ C1] R13: 0000000000000021 R14: dffffc0000000000 R15: 000000001c000004 [ 202.973672][ C1] get_signal+0x11d6/0x12c0 [ 202.973697][ C1] arch_do_signal_or_restart+0xc1/0x1300 [ 202.973717][ C1] ? _copy_from_user+0x111/0x170 [ 202.973734][ C1] ? __ia32_sys_rt_sigreturn+0x660/0x790 [ 202.973755][ C1] ? load_gs_index+0x120/0x120 [ 202.973774][ C1] ? get_sigframe_size+0x10/0x10 [ 202.973801][ C1] ? exit_to_user_mode_loop+0x3b/0x130 [ 202.973822][ C1] exit_to_user_mode_loop+0x9e/0x130 [ 202.973841][ C1] exit_to_user_mode_prepare+0xb1/0x140 [ 202.973860][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 202.973876][ C1] do_syscall_64+0x58/0xa0 [ 202.973902][ C1] ? clear_bhb_loop+0x30/0x80 [ 202.973916][ C1] ? clear_bhb_loop+0x30/0x80 [ 202.973931][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 202.973950][ C1] RIP: 0033:0x7f8a01fd3b69 [ 202.973966][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.973978][ C1] RSP: 002b:00007ffee77f80a8 EFLAGS: 00000246 [ 202.973989][ C1] RAX: fffffffffffffffc RBX: 0000000000017c6f RCX: 00007f8a01fd3b69 [ 202.974000][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8a021fafac [ 202.974010][ C1] RBP: 0000000000000032 R08: 0017308422827c12 R09: 0000000be77f839f [ 202.974020][ C1] R10: 00007ffee77f81a0 R11: 0000000000000246 R12: 00007f8a021fafac [ 202.974030][ C1] R13: 00007ffee77f81a0 R14: 0000000000017ca1 R15: 00007ffee77f81c0 [ 202.974049][ C1]