last executing test programs: 5.018766293s ago: executing program 2 (id=60): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x50) mount_setattr(0xffffffffffffffff, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x1, 0x70, 0x20000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000007000000070000000600000000000000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000074492dababc82b24736014bac800"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x18) syz_open_dev$tty20(0xc, 0x4, 0x1) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x4000, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000f5ff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r3, 0x402, 0x1a) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140), &(0x7f0000000700)=ANY=[], 0x381, 0x2) 4.788013217s ago: executing program 4 (id=62): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) 4.603701351s ago: executing program 4 (id=65): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$igmp6(0xa, 0x3, 0x3a) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd8, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x6, 0x200, &(0x7f0000000880)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a7309000000000000000f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413fcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d921106f0b69617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff4175b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a2b463dc961416c80c55773f917020753ed51cfd73c1e06fbadd156d56bedc117af95d242d6d07002ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f63520cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cf0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000100)={0x2000000, 0x0, 0x13, 0x4, 0x200, 0x0}) r5 = socket(0xa, 0x3, 0xfc) setsockopt$inet6_opts(r5, 0x29, 0x39, &(0x7f0000000240)=ANY=[@ANYBLOB="6114"], 0xa8) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) munmap(&(0x7f0000003000/0x2000)=nil, 0x2000) capset(&(0x7f0000002ffa)={0x19980330}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) epoll_create(0x3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x4, 0x0, r7, 0x400, '\x00', 0x0, r6, 0x0, 0x4, 0x3}, 0x50) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x8, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @local, {[], @echo_request={0x2}}}}}}, 0x0) 3.636446179s ago: executing program 4 (id=76): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x28}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x10) close(r1) socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x2000004, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 3.63588834s ago: executing program 2 (id=78): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0x66, &(0x7f0000000b80)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}, {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}}}, 0x0) 3.531769821s ago: executing program 2 (id=79): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) io_setup(0x3, &(0x7f0000000340)) 3.433749914s ago: executing program 4 (id=82): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES16=r1, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00000400f9ff00fff5000000000000000000000000000100000000120002000a00060000000000000000000000000000000000000000bb000000000d0001007564703a73"], 0x6c}}, 0x0) 3.220909448s ago: executing program 2 (id=85): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_setup(0xf, 0x0) eventfd(0x4114) 3.220504997s ago: executing program 2 (id=86): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x6, 0x7fe2, 0x42, 0x140, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe, 0x2}, 0x50) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r2}, 0x18) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r8 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES8], 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x401, @empty, 0x80000000}}, 0x6, 0x7f, 0xfffffffe, 0x6, 0x4, 0x2, 0x1}, &(0x7f0000000680)=0x9c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000000d40)={r9, @in={{0x2, 0x4e20, @local}}, 0x6, 0x0, 0x4, 0x1, 0x9c8}, &(0x7f0000000e00)=0x98) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r4) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xa4, r10, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x74, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0xa4}, 0x1, 0x0, 0x0, 0x460c4}, 0x800) timer_create(0x3, 0x0, &(0x7f0000001b40)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) mount$9p_fd(0x0, 0x0, 0x0, 0x80, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000380)={0x4b, 0x6, 0x1, "e38c4172ccf663c338e70e7bba63fcc30312baca09cfb82a2a0e144e1000ca929dfbec39d787c7bf830e090e8bc8fec377d8ab6e4e7c905813c1f4c582e00d0e54d48ed8d2e323b6c49fc6"}) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}, {0x77359400}}, 0x0) timer_gettime(r11, &(0x7f00000000c0)) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001280)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="a18300000000000000000500"], 0x74}}, 0x0) 3.197086568s ago: executing program 4 (id=87): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x44, 0x2, {{0xa}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0xa, 0x1, {0x10}}]}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x74}}, 0x0) 3.08241935s ago: executing program 3 (id=89): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) kexec_load(0x10, 0x1, &(0x7f0000000340)=[{&(0x7f0000000200)="e8c8a1fe", 0x4, 0x36f1, 0x9}], 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2.830636655s ago: executing program 4 (id=90): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) read(r0, 0x0, 0x5d) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000000)={[{@nodiscard}, {@noinit_itable}, {@barrier_val={'barrier', 0x3d, 0x40}}, {@grpjquota}, {@errors_remount}, {@init_itable}]}, 0x1, 0x4c5, &(0x7f0000000540)="$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") r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x8948, &(0x7f0000000100)={'bridge0\x00', @ifru_settings={0x7fffffff, 0x40, @fr=&(0x7f00000000c0)={0x3, 0x6, 0x2, 0x81, 0x7f, 0x101, 0x4}}}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001b80), &(0x7f0000001bc0)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r3 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2d, 0x0, 0x0, 0x6}]}, 0xfffffffffffffeea) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47bc, 0xfac7, 0x0, 0x0, 0x0) 1.754367636s ago: executing program 1 (id=95): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080), 0x18) utimensat(r1, 0x0, 0x0, 0x0) 1.525917931s ago: executing program 0 (id=97): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00000400f9ff00fff5000000000000000000000000000100000000120002000a00060000000000000000000000000000000000000000bb000000000d0001007564703a73"], 0x6c}}, 0x0) 1.322326784s ago: executing program 1 (id=98): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x497, &(0x7f0000000600)={0x0, 0x4661, 0x800, 0x5, 0x20e}, &(0x7f0000000540)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x400, 0x1}) io_uring_enter(r1, 0x40f9, 0x217, 0xa5, 0x0, 0x0) 1.298476285s ago: executing program 0 (id=99): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x0, 0xb51b, 0x10}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x4a, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x1a, 0xa01, 0x70bd2b, 0x0, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x4004080}, 0x20008080) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = eventfd2(0x7, 0x80001) io_submit(0x0, 0x0, &(0x7f0000004500)) close(r3) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x391, 0x4) sendto$inet(r2, 0x0, 0x0, 0x40004, &(0x7f0000001080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000340)='G', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='westwood\x00', 0x9) shutdown(r1, 0x1) 1.138081068s ago: executing program 0 (id=100): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "12"}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 1.04237858s ago: executing program 1 (id=101): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='sched_kthread_work_queue_work\x00', r1}, 0x10) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 947.200111ms ago: executing program 0 (id=102): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00006600}, 0x8000000, 0x0, 0x1, 0x1}, 0x29) 925.545942ms ago: executing program 1 (id=103): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400000020"], 0x50) r1 = syz_clone(0x8102000, &(0x7f0000000240)="6f0efb091347a3c60f51e104c9aed1151ec07583b5bded0aa11655dd5b96fc808eae1f0ad34851543ee074a3641a04200bf85e350b02d72a9207d29e9a50442708d15a1ac1e8953d7abaa9245cf7e6dd89b3c72a85226a7565", 0x59, &(0x7f0000000000), &(0x7f00000003c0), &(0x7f0000000440)="09c8a5c7d9be26e761c897de6a33b3b745c940a0daedd9949da35b92932450c082dfc3d3be160a4d0b1eb4a5c6f8ad4755d8db6a9d59c768ca7b0c01ef01d13cef67c43554e648d7b6b8e5768205dce2fd0bf2ce4a595b97e937d07e1a3276715c0918e0d3ea3b66d393b761c2b650369c7b49db68ed66dc67f0e5caf8a796ab6013fd039b14c039020c9372eb0fae944c14006056f244a2ff6e335d61bf7bb34ae56542c3fa019d3466da62cf9a653daee5b7776a578d32a31726d7e50dadcc6b4e1e8291") r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f80)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r1], &(0x7f00000001c0)='GPL\x00', 0x80805, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, 0x2}, 0x94) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) shutdown(r3, 0x1) close(r3) unshare(0x2c060000) creat(&(0x7f0000000100)='./bus\x00', 0x0) 822.307964ms ago: executing program 3 (id=104): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000940)=0x28, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0xfff7}], 0x1}, 0xb00}], 0x1, 0x0) 778.083355ms ago: executing program 0 (id=105): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x77, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e22, @empty}}, 0x0, 0x0, 0x2, 0x0, "de2170420b42866d263a524b8f533db671e3fb462f6e152472578c7e9359d81409d1a02b9c2248e87414c4cfec9913387fd71cf21f357c8ca38ffddab5d147e98ea2b1cdfaf4e9530630c66996c4905b"}, 0xd8) unshare(0x22020600) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x1, 0x400, 0x8}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) 607.738648ms ago: executing program 3 (id=106): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) 426.441052ms ago: executing program 3 (id=107): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) 362.174883ms ago: executing program 1 (id=108): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtaction={0x488, 0x30, 0xffff, 0x3, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x2000000, 0xffffffff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14880, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x4, 0x20000000, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x8, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x0, 0x0, 0xfffffffe, {0x3, 0x0, 0x0, 0x0, 0xb, 0x3}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x3, 0x2}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x488}}, 0x40844) 228.382125ms ago: executing program 3 (id=109): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00000400f9ff00fff5000000000000000000000000000100000000120002000a00060000000000000000000000000000000000000000bb000000000d0001007564703a73"], 0x6c}}, 0x0) 102.303608ms ago: executing program 0 (id=110): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x0, 0xb51b, 0x10}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x4a, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x1a, 0xa01, 0x70bd2b, 0x0, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x4004080}, 0x20008080) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = eventfd2(0x7, 0x80001) io_submit(0x0, 0x0, &(0x7f0000004500)) close(r3) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x391, 0x4) sendto$inet(r2, 0x0, 0x0, 0x40004, &(0x7f0000001080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000022c0)='./file0\x00', 0x3a0c050, &(0x7f0000000140)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@uni_xlateno}, {@fat=@showexec}, {@shortname_winnt}, {@utf8no}, {@uni_xlateno}, {@uni_xlate}, {@shortname_mixed}, {@uni_xlateno}, {@rodir}, {@utf8no}]}, 0x3, 0x350, &(0x7f0000000580)="$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") setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='westwood\x00', 0x9) shutdown(r1, 0x1) 11.47099ms ago: executing program 1 (id=111): shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() close(0xffffffffffffffff) timer_create(0x1, &(0x7f0000000000)={0x0, 0x4, 0x4}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10138, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) writev(r3, 0x0, 0x19) syz_socket_connect_nvme_tcp() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000", 0x20}], 0x1) 11.21844ms ago: executing program 2 (id=112): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x74c, &(0x7f0000000f40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) 0s ago: executing program 3 (id=113): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001f80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r2, &(0x7f0000000000)=0xfe8e, 0x12) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.153' (ED25519) to the list of known hosts. [ 71.039074][ T4172] cgroup: Unknown subsys name 'net' [ 71.201601][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 72.850515][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 74.878151][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 74.986198][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 75.066364][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 75.108075][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.115542][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.123758][ T4187] device bridge_slave_0 entered promiscuous mode [ 75.137448][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.145158][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.153634][ T4187] device bridge_slave_1 entered promiscuous mode [ 75.178922][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 75.245685][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.263102][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 75.281270][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.307780][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.315379][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.323252][ T4185] device bridge_slave_0 entered promiscuous mode [ 75.379683][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.387151][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.396126][ T4185] device bridge_slave_1 entered promiscuous mode [ 75.403563][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.411019][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.420118][ T4188] device bridge_slave_0 entered promiscuous mode [ 75.448758][ T4187] team0: Port device team_slave_0 added [ 75.464278][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.471391][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.479878][ T4188] device bridge_slave_1 entered promiscuous mode [ 75.490502][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.497744][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.505964][ T4183] device bridge_slave_0 entered promiscuous mode [ 75.515099][ T4187] team0: Port device team_slave_1 added [ 75.521525][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.529063][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.537503][ T4183] device bridge_slave_1 entered promiscuous mode [ 75.581582][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.621504][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.632753][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.668305][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.685900][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.693064][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.719549][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.734396][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.773378][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.780639][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.806844][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.820830][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.850502][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.857954][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.866510][ T4184] device bridge_slave_0 entered promiscuous mode [ 75.890551][ T4185] team0: Port device team_slave_0 added [ 75.899582][ T4188] team0: Port device team_slave_0 added [ 75.906972][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.915646][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.923837][ T4184] device bridge_slave_1 entered promiscuous mode [ 75.953831][ T4185] team0: Port device team_slave_1 added [ 75.971648][ T4188] team0: Port device team_slave_1 added [ 76.003253][ T4183] team0: Port device team_slave_0 added [ 76.021598][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.028885][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.055400][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.081091][ T4187] device hsr_slave_0 entered promiscuous mode [ 76.088560][ T4187] device hsr_slave_1 entered promiscuous mode [ 76.097915][ T4183] team0: Port device team_slave_1 added [ 76.112118][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.119379][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.146588][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.160797][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.190184][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.197223][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.223813][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.240764][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.259245][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.267911][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.294615][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.308223][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.315628][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.342741][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.354504][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.361882][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.389126][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.442461][ T4184] team0: Port device team_slave_0 added [ 76.490743][ T4184] team0: Port device team_slave_1 added [ 76.500210][ T4185] device hsr_slave_0 entered promiscuous mode [ 76.508451][ T4185] device hsr_slave_1 entered promiscuous mode [ 76.515816][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.524591][ T4185] Cannot create hsr debugfs directory [ 76.555321][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 76.564310][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 76.572413][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 76.578840][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 76.593891][ T4183] device hsr_slave_0 entered promiscuous mode [ 76.601072][ T4183] device hsr_slave_1 entered promiscuous mode [ 76.608849][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.617082][ T4183] Cannot create hsr debugfs directory [ 76.626420][ T4188] device hsr_slave_0 entered promiscuous mode [ 76.633779][ T4188] device hsr_slave_1 entered promiscuous mode [ 76.641128][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.644283][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 76.648923][ T4188] Cannot create hsr debugfs directory [ 76.688849][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.695939][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.722418][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.764819][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.771830][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.800849][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.998544][ T4184] device hsr_slave_0 entered promiscuous mode [ 77.006419][ T4184] device hsr_slave_1 entered promiscuous mode [ 77.013521][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.024364][ T4184] Cannot create hsr debugfs directory [ 77.189523][ T4187] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.201827][ T4187] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.234631][ T4187] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.251987][ T4187] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.295938][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.313056][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.324039][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.340345][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.441642][ T4188] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.470115][ T4188] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.481852][ T4188] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.499124][ T4188] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.546712][ T4183] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.557790][ T4183] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.568860][ T4183] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.589453][ T4183] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.612737][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.636023][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.683069][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.693153][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.706424][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.716237][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.732452][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.746267][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.767201][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.777182][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.787300][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.795006][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.807093][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.817378][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.826481][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.833685][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.842930][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.862777][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.876974][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.889343][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.898300][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.905567][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.916960][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.931434][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.948613][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.958378][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.967859][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.983774][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.004809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.015009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.023903][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.031048][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.040373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.051298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.078294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.091309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.100955][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.128343][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.138922][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.148693][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.159060][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.184857][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.206837][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.216135][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.225786][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.237644][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 78.243239][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.245326][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.255197][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.269245][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.278528][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.291348][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.318495][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.328559][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.356429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.368944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.380825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.393446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.411238][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.431791][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.456126][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.467311][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.496563][ T1212] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.503791][ T1212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.513665][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.530282][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.540192][ T1212] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.547561][ T1212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.580259][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.592290][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.606159][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.621177][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.645098][ T4260] Bluetooth: hci0: command 0x041b tx timeout [ 78.651344][ T4260] Bluetooth: hci2: command 0x041b tx timeout [ 78.683780][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.690927][ T4260] Bluetooth: hci4: command 0x041b tx timeout [ 78.702744][ T4260] Bluetooth: hci3: command 0x041b tx timeout [ 78.702866][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.718677][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.728004][ T4259] Bluetooth: hci1: command 0x041b tx timeout [ 78.730824][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.747092][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.756776][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.766428][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.775440][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.785571][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.794485][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.806890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.815930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.838795][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.847983][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.856731][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.867304][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.878795][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.889005][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.898689][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.906226][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.917739][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.932678][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.948348][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.959874][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.988863][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.001507][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.015058][ T1212] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.022424][ T1212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.056942][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 79.068597][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.078513][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.120102][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.142329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.158324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.172393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.186259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.196333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.227558][ T4187] device veth0_vlan entered promiscuous mode [ 79.240770][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 79.250724][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.261075][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.270976][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.280440][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.290660][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.315652][ T4185] device veth0_vlan entered promiscuous mode [ 79.336752][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.346312][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.356023][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.365796][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.374933][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.384074][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.393190][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.403096][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.412294][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.421403][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.429731][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.438078][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.449179][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.459774][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.488264][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.499029][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.511509][ T4187] device veth1_vlan entered promiscuous mode [ 79.541062][ T4185] device veth1_vlan entered promiscuous mode [ 79.579432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 79.591309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 79.620642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 79.633272][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 79.642867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.651758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.660604][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.668224][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.677494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.706885][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.722367][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.732459][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.739624][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.754217][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.787907][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.807558][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.826316][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.838498][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.848619][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.857822][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.867733][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.879775][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.892536][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.902297][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.937900][ T4185] device veth0_macvtap entered promiscuous mode [ 79.953402][ T4187] device veth0_macvtap entered promiscuous mode [ 79.968713][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.977515][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.987468][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.997479][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.008294][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.017833][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.030736][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.039822][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.052388][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.067825][ T4185] device veth1_macvtap entered promiscuous mode [ 80.079101][ T4187] device veth1_macvtap entered promiscuous mode [ 80.120813][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.141358][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.152816][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.173558][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.190751][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.200138][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.228725][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.271077][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.283268][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.292848][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.302189][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.311396][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.321916][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.332282][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.341087][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.350935][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.362545][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.376394][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.386714][ T4183] device veth0_vlan entered promiscuous mode [ 80.395899][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.407955][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.419484][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.428508][ T4187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.438598][ T4187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.447730][ T4187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.456695][ T4187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.468833][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.479882][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.489207][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.498512][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.519270][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.528914][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.538066][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.547214][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.569597][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.587379][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.599887][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.607900][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.617287][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.625400][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.638238][ T4183] device veth1_vlan entered promiscuous mode [ 80.659589][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.669386][ T4188] device veth0_vlan entered promiscuous mode [ 80.710534][ T4188] device veth1_vlan entered promiscuous mode [ 80.729784][ T4259] Bluetooth: hci3: command 0x040f tx timeout [ 80.736823][ T4259] Bluetooth: hci4: command 0x040f tx timeout [ 80.742923][ T4259] Bluetooth: hci2: command 0x040f tx timeout [ 80.749574][ T4259] Bluetooth: hci0: command 0x040f tx timeout [ 80.797925][ T4260] Bluetooth: hci1: command 0x040f tx timeout [ 80.823709][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 80.834878][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 80.843388][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 80.852984][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 80.862383][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.873596][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.898865][ T4183] device veth0_macvtap entered promiscuous mode [ 80.917557][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 80.926649][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.969495][ T4183] device veth1_macvtap entered promiscuous mode [ 80.982386][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 80.991493][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.000338][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.009418][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.019219][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.028070][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.071141][ T4184] device veth0_vlan entered promiscuous mode [ 81.080265][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.090979][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.101746][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.111649][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.136019][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.147641][ T4188] device veth0_macvtap entered promiscuous mode [ 81.165050][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.174615][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.181457][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.190609][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.208110][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.220483][ T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.229851][ T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.231912][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.248301][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.259392][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.271168][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.294274][ T4184] device veth1_vlan entered promiscuous mode [ 81.306585][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.315809][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.327125][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.338651][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.350124][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.361394][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.372054][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.384630][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.416620][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.433222][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.455158][ T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.459330][ T4183] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.471160][ T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.483968][ T4183] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.495508][ T4183] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.504738][ T4183] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.519570][ T4188] device veth1_macvtap entered promiscuous mode [ 81.533013][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.543269][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.658006][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.677247][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.688096][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.699865][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.711066][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.722641][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.735798][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.752185][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.769624][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.794379][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.805485][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.815779][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.827108][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.840196][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.857191][ T4184] device veth0_macvtap entered promiscuous mode [ 81.866654][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.878042][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.888510][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.898645][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.912657][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.923274][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.957971][ T4188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.977850][ T4188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.987013][ T4188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.997377][ T4188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.021930][ T4184] device veth1_macvtap entered promiscuous mode [ 82.030588][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.039370][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.064256][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.072391][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.137049][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.166242][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.179582][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.190350][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.208441][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.220720][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.238113][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.257348][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.274361][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.292799][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.307167][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.320941][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.331564][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.340907][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.353521][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 82.373526][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.385515][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.396394][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.407761][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.431608][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.445899][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.460262][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.474087][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.497337][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.523113][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.535316][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.559489][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.584074][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.600225][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.609783][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.688397][ T4324] program syz.4.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.783637][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.806878][ T4231] Bluetooth: hci0: command 0x0419 tx timeout [ 82.821295][ T4231] Bluetooth: hci2: command 0x0419 tx timeout [ 82.854862][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.867480][ T4231] Bluetooth: hci4: command 0x0419 tx timeout [ 82.888702][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.897342][ T4231] Bluetooth: hci3: command 0x0419 tx timeout [ 82.915935][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.956080][ T4259] Bluetooth: hci1: command 0x0419 tx timeout [ 82.991201][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.023094][ T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.044548][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.079832][ T3086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.100147][ T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.109290][ T3086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.131480][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.159221][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.291828][ T26] audit: type=1326 audit(1757271042.893:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4338 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e2bb31be9 code=0x7ffc0000 [ 83.324862][ T4339] netlink: 'syz.3.4': attribute type 2 has an invalid length. [ 83.347088][ T4339] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 83.366016][ T4339] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 83.377295][ T26] audit: type=1326 audit(1757271042.933:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4338 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f5e2bb31be9 code=0x7ffc0000 [ 83.391147][ T4339] netlink: 'syz.3.4': attribute type 2 has an invalid length. [ 83.409273][ T26] audit: type=1326 audit(1757271042.933:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4338 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e2bb31be9 code=0x7ffc0000 [ 83.439607][ T26] audit: type=1326 audit(1757271042.933:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4338 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5e2bb31be9 code=0x7ffc0000 [ 83.455226][ T4339] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 83.473031][ T26] audit: type=1326 audit(1757271042.933:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4338 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e2bb31be9 code=0x7ffc0000 [ 83.495790][ T4341] loop0: detected capacity change from 0 to 2048 [ 83.502756][ T4339] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 83.511174][ T26] audit: type=1326 audit(1757271042.933:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4338 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5e2bb31be9 code=0x7ffc0000 [ 83.544667][ T4339] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 83.554961][ T26] audit: type=1326 audit(1757271042.933:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4338 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e2bb31be9 code=0x7ffc0000 [ 83.584887][ T26] audit: type=1326 audit(1757271042.933:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4338 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5e2bb31be9 code=0x7ffc0000 [ 83.674531][ T26] audit: type=1326 audit(1757271043.223:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4338 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e2bb31be9 code=0x7ffc0000 [ 83.735619][ T4341] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,,errors=continue. Quota mode: none. [ 83.818588][ T4341] Process accounting resumed [ 85.217085][ T26] audit: type=1326 audit(1757271044.833:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4364 comm="syz.3.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e2bb31be9 code=0x7ffc0000 [ 85.264802][ T4371] loop9: detected capacity change from 0 to 7 [ 85.287471][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.298668][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 85.310994][ T4372] loop1: detected capacity change from 0 to 256 [ 85.320742][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.320792][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 85.321413][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.321446][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 85.322178][ T4372] ======================================================= [ 85.322178][ T4372] WARNING: The mand mount option has been deprecated and [ 85.322178][ T4372] and is ignored by this kernel. Remove the mand [ 85.322178][ T4372] option from the mount to silence this warning. [ 85.322178][ T4372] ======================================================= [ 85.323608][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.323642][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 85.328005][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.328049][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 85.331614][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.331650][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 85.345523][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.345569][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 85.351372][ T4371] ldm_validate_partition_table(): Disk read failed. [ 85.351637][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.351671][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 85.352505][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.352540][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 85.352970][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.353012][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 85.353291][ T4371] Dev loop9: unable to read RDB block 0 [ 85.353752][ T4371] loop9: unable to read partition table [ 85.353915][ T4371] loop9: partition table beyond EOD, truncated [ 85.353948][ T4371] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 85.353948][ T4371] ) failed (rc=-5) [ 85.420056][ T4373] loop3: detected capacity change from 0 to 256 [ 85.425310][ T4372] FAT-fs (loop1): Directory bread(block 64) failed [ 85.703502][ T4372] FAT-fs (loop1): Directory bread(block 65) failed [ 85.706671][ T4376] loop0: detected capacity change from 0 to 1024 [ 85.714363][ T4373] FAT-fs (loop3): Unrecognized mount option "" or missing value [ 85.748704][ T4372] FAT-fs (loop1): Directory bread(block 66) failed [ 85.759236][ T4372] FAT-fs (loop1): Directory bread(block 67) failed [ 85.800149][ T4372] FAT-fs (loop1): Directory bread(block 68) failed [ 85.828502][ T4376] EXT4-fs (loop0): mounted filesystem without journal. Opts: noinit_itable,dioread_lock,barrier=0x0000000000000000,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,abort,errors=continue,. Quota mode: none. [ 85.852952][ T4372] FAT-fs (loop1): Directory bread(block 69) failed [ 85.889661][ T4372] FAT-fs (loop1): Directory bread(block 70) failed [ 85.851528][ T4365] infiniband !yz!: set active [ 85.916417][ T4365] infiniband !yz!: added team_slave_0 [ 85.970814][ T4365] RDS/IB: !yz!: added [ 85.976636][ T4365] smc: adding ib device !yz! with port count 1 [ 85.981033][ T4372] FAT-fs (loop1): Directory bread(block 71) failed [ 85.983414][ T4365] smc: ib device !yz! port 1 has pnetid [ 86.050542][ T4372] FAT-fs (loop1): Directory bread(block 72) failed [ 86.086763][ T4372] FAT-fs (loop1): Directory bread(block 73) failed [ 86.200317][ T4376] program syz.0.21 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 86.250763][ T4376] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 86.575805][ T4245] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 86.754459][ T4245] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 86.763567][ T4245] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 86.771499][ T4245] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 86.779480][ T4245] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 86.787810][ T4245] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 86.796945][ T4245] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 86.804990][ T4245] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 86.812688][ T4245] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 86.821620][ T4245] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 86.832465][ T4245] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 86.872544][ T4245] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 86.988510][ T4245] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 87.142968][ T4245] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 87.282724][ T4245] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 87.520407][ T4245] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 87.637253][ T4245] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 87.907163][ T4403] fido_id[4403]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 88.072755][ T4410] loop2: detected capacity change from 0 to 1024 [ 88.168109][ T4414] loop4: detected capacity change from 0 to 256 [ 88.290710][ T4420] serio: Serial port ptm0 [ 88.301280][ T4410] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 88.325504][ T4410] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.375822][ T4425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.37'. [ 88.399356][ T4425] device bridge_slave_1 left promiscuous mode [ 88.409612][ T4425] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.447847][ T4425] device bridge_slave_0 left promiscuous mode [ 88.453789][ T4414] FAT-fs (loop4): Directory bread(block 64) failed [ 88.459786][ T4427] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.32: bg 0: block 393: padding at end of block bitmap is not set [ 88.460858][ T4414] FAT-fs (loop4): Directory bread(block 65) failed [ 88.461022][ T4414] FAT-fs (loop4): Directory bread(block 66) failed [ 88.497187][ T4425] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.644936][ T4414] FAT-fs (loop4): Directory bread(block 67) failed [ 88.651885][ T4414] FAT-fs (loop4): Directory bread(block 68) failed [ 88.670196][ T4427] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 28 [ 88.700675][ T4427] EXT4-fs (loop2): This should not happen!! Data will be lost [ 88.700675][ T4427] [ 88.714510][ T4414] FAT-fs (loop4): Directory bread(block 69) failed [ 88.721317][ T4414] FAT-fs (loop4): Directory bread(block 70) failed [ 88.798789][ T4414] FAT-fs (loop4): Directory bread(block 71) failed [ 88.845710][ T4427] EXT4-fs (loop2): Total free blocks count 0 [ 88.851682][ T4414] FAT-fs (loop4): Directory bread(block 72) failed [ 88.903038][ T4414] FAT-fs (loop4): Directory bread(block 73) failed [ 88.911476][ T4427] EXT4-fs (loop2): Free/Dirty block details [ 88.956796][ T4427] EXT4-fs (loop2): free_blocks=0 [ 88.968128][ T4427] EXT4-fs (loop2): dirty_blocks=16 [ 89.089420][ T4427] EXT4-fs (loop2): Block reservation details [ 89.103589][ T4427] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 89.867010][ T4458] loop0: detected capacity change from 0 to 256 [ 89.874028][ T4457] loop1: detected capacity change from 0 to 2048 [ 90.057692][ T4458] FAT-fs (loop0): Directory bread(block 64) failed [ 90.089419][ T4458] FAT-fs (loop0): Directory bread(block 65) failed [ 90.118497][ T4457] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 90.124524][ T4458] FAT-fs (loop0): Directory bread(block 66) failed [ 90.136728][ T4458] FAT-fs (loop0): Directory bread(block 67) failed [ 90.148951][ T26] kauditd_printk_skb: 25 callbacks suppressed [ 90.148966][ T26] audit: type=1326 audit(1757271049.763:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4465 comm="syz.4.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc988827be9 code=0x7ffc0000 [ 90.187754][ T4458] FAT-fs (loop0): Directory bread(block 68) failed [ 91.034267][ T4458] FAT-fs (loop0): Directory bread(block 69) failed [ 91.094400][ T4458] FAT-fs (loop0): Directory bread(block 70) failed [ 91.172831][ T4458] FAT-fs (loop0): Directory bread(block 71) failed [ 91.190361][ T26] audit: type=1800 audit(1757271049.793:38): pid=4457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.50" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 91.214677][ T4458] FAT-fs (loop0): Directory bread(block 72) failed [ 91.225921][ T26] audit: type=1326 audit(1757271049.833:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4465 comm="syz.4.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7fc988827be9 code=0x7ffc0000 [ 91.260982][ T4458] FAT-fs (loop0): Directory bread(block 73) failed [ 91.324982][ T26] audit: type=1326 audit(1757271049.853:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4465 comm="syz.4.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc988827be9 code=0x7ffc0000 [ 91.423484][ T26] audit: type=1326 audit(1757271050.593:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4465 comm="syz.4.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc988827be9 code=0x7ffc0000 [ 91.423534][ T26] audit: type=1107 audit(1757271050.983:42): pid=4480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='^' [ 91.537350][ T26] audit: type=1326 audit(1757271051.153:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4488 comm="syz.0.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f856bbe9 code=0x7ffc0000 [ 91.543135][ T26] audit: type=1326 audit(1757271051.153:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4488 comm="syz.0.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc9f856bbe9 code=0x7ffc0000 [ 91.545800][ T26] audit: type=1326 audit(1757271051.163:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4488 comm="syz.0.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f856bbe9 code=0x7ffc0000 [ 91.546020][ T26] audit: type=1326 audit(1757271051.163:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4488 comm="syz.0.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f856bbe9 code=0x7ffc0000 [ 91.558535][ T4489] mmap: syz.0.61 (4489) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 91.582266][ T4494] loop1: detected capacity change from 0 to 512 [ 91.664702][ T4494] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 91.664747][ T4494] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 91.724060][ T4494] EXT4-fs (loop1): 1 orphan inode deleted [ 91.724261][ T4494] EXT4-fs (loop1): 1 truncate cleaned up [ 91.724282][ T4494] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,quota,. Quota mode: writeback. [ 92.531642][ T4523] nfs: Bad value for 'source' [ 92.731523][ T23] kernel write not supported for file bpf-prog (pid: 23 comm: kworker/1:1) [ 92.752197][ T4527] loop0: detected capacity change from 0 to 1024 [ 92.819487][ T4527] EXT4-fs (loop0): Ignoring removed nobh option [ 92.896466][ T4527] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #11: comm syz.0.74: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 92.972627][ T4527] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.74: couldn't read orphan inode 11 (err -117) [ 93.040168][ T4527] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 93.073334][ T4550] loop2: detected capacity change from 0 to 128 [ 93.167131][ T4550] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 93.169679][ T4527] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.74: Invalid block bitmap block 0 in block_group 0 [ 93.198333][ T4550] System zones: 1-3, 19-19, 35-36 [ 93.210918][ T4550] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback. [ 93.241806][ T4554] netem: incorrect gi model size [ 93.260809][ T4557] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 93.343986][ T4550] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 93.354814][ T4559] syz.3.89[4559] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.379230][ T4554] netem: change failed [ 93.404596][ T4527] EXT4-fs error (device loop0): ext4_acquire_dquot:6209: comm syz.0.74: Failed to acquire dquot type 0 [ 93.468398][ T4559] syz.3.89[4559] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.599275][ T1108] cfg80211: failed to load regulatory.db [ 93.859392][ T4572] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.93' sets config #0 [ 93.974332][ T7] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 93.990156][ T4575] loop1: detected capacity change from 0 to 512 [ 94.060597][ T4575] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 94.106018][ T4575] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 94.143833][ T4575] EXT4-fs (loop1): 1 truncate cleaned up [ 94.150442][ T4575] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,bsdgroups,max_batch_time=0x0000000000000007,grpjquota=,mb_optimize_scan=0x0000000000000001,sysvgroups,,errors=continue. Quota mode: none. [ 94.335461][ T7] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 94.374278][ T7] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 94.413953][ T7] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 94.474309][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.678444][ T4581] loop1: detected capacity change from 0 to 512 [ 94.780864][ T4581] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 94.872253][ T4564] program syz.2.86 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.889481][ T4581] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.105492][ T4564] netlink: 96 bytes leftover after parsing attributes in process `syz.2.86'. [ 95.492682][ T4600] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 96.224348][ T7] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 96.265379][ T7] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input5 [ 96.328464][ T7] input: failed to attach handler kbd to device input5, error: -5 [ 96.337607][ T4618] loop0: detected capacity change from 0 to 256 [ 96.431094][ T7] usb 3-1: USB disconnect, device number 2 [ 96.438589][ T4620] [ 96.440983][ T4620] ====================================================== [ 96.448051][ T4620] WARNING: possible circular locking dependency detected [ 96.455333][ T4620] syzkaller #0 Not tainted [ 96.459873][ T4620] ------------------------------------------------------ [ 96.467317][ T4620] syz.3.113/4620 is trying to acquire lock: [ 96.473325][ T4620] ffff88802aa08118 (&disk->open_mutex){+.+.}-{3:3}, at: bd_register_pending_holders+0x33/0x310 [ 96.473930][ T4624] loop2: detected capacity change from 0 to 2048 [ 96.483745][ T4620] [ 96.483745][ T4620] but task is already holding lock: [ 96.483756][ T4620] ffffffff8cf7e148 (disks_mutex){+.+.}-{3:3}, at: md_alloc+0x48/0xc00 [ 96.505833][ T4620] [ 96.505833][ T4620] which lock already depends on the new lock. [ 96.505833][ T4620] [ 96.516463][ T4620] [ 96.516463][ T4620] the existing dependency chain (in reverse order) is: [ 96.525616][ T4620] [ 96.525616][ T4620] -> #8 (disks_mutex){+.+.}-{3:3}: [ 96.533108][ T4620] __mutex_lock_common+0x1eb/0x2390 [ 96.539197][ T4620] mutex_lock_nested+0x17/0x20 [ 96.544694][ T4620] md_alloc+0x48/0xc00 [ 96.549537][ T4620] blk_request_module+0x26e/0x290 [ 96.555123][ T4620] blkdev_get_no_open+0x38/0x1d0 [ 96.560925][ T4620] blkdev_get_by_dev+0x77/0xa60 [ 96.566349][ T4620] swsusp_check+0x9b/0x2a0 [ 96.571427][ T4620] software_resume+0xc6/0x3b0 [ 96.576690][ T4620] resume_store+0xe4/0x130 [ 96.581826][ T4620] kernfs_fop_write_iter+0x379/0x4c0 [ 96.587678][ T4620] vfs_write+0x712/0xd00 [ 96.592481][ T4620] ksys_write+0x14d/0x250 [ 96.597452][ T4620] do_syscall_64+0x4c/0xa0 [ 96.602427][ T4620] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.607788][ T4618] FAT-fs (loop0): Directory bread(block 64) failed [ 96.608999][ T4620] [ 96.608999][ T4620] -> #7 (major_names_lock){+.+.}-{3:3}: [ 96.609036][ T4620] __mutex_lock_common+0x1eb/0x2390 [ 96.625784][ T4618] FAT-fs (loop0): Directory bread(block 65) failed [ 96.629340][ T4620] mutex_lock_nested+0x17/0x20 [ 96.629371][ T4620] blk_request_module+0x31/0x290 [ 96.646647][ T4620] blkdev_get_no_open+0x38/0x1d0 [ 96.652143][ T4620] blkdev_get_by_dev+0x77/0xa60 [ 96.652463][ T4618] FAT-fs (loop0): Directory bread(block 66) failed [ 96.657547][ T4620] swsusp_check+0x9b/0x2a0 [ 96.657576][ T4620] software_resume+0xc6/0x3b0 [ 96.657596][ T4620] resume_store+0xe4/0x130 [ 96.657614][ T4620] kernfs_fop_write_iter+0x379/0x4c0 [ 96.657634][ T4620] vfs_write+0x712/0xd00 [ 96.657650][ T4620] ksys_write+0x14d/0x250 [ 96.657665][ T4620] do_syscall_64+0x4c/0xa0 [ 96.657682][ T4620] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.657702][ T4620] [ 96.657702][ T4620] -> #6 (system_transition_mutex/1){+.+.}-{3:3}: [ 96.657739][ T4620] __mutex_lock_common+0x1eb/0x2390 [ 96.657759][ T4620] mutex_lock_nested+0x17/0x20 [ 96.657779][ T4620] software_resume+0x7c/0x3b0 [ 96.657798][ T4620] resume_store+0xe4/0x130 [ 96.657817][ T4620] kernfs_fop_write_iter+0x379/0x4c0 [ 96.657839][ T4620] vfs_write+0x712/0xd00 [ 96.657854][ T4620] ksys_write+0x14d/0x250 [ 96.657870][ T4620] do_syscall_64+0x4c/0xa0 [ 96.657886][ T4620] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.657905][ T4620] [ 96.657905][ T4620] -> #5 (&of->mutex){+.+.}-{3:3}: [ 96.657934][ T4620] __mutex_lock_common+0x1eb/0x2390 [ 96.657954][ T4620] mutex_lock_nested+0x17/0x20 [ 96.657974][ T4620] kernfs_seq_start+0x51/0x3c0 [ 96.658005][ T4620] seq_read_iter+0x3c4/0xd50 [ 96.658027][ T4620] vfs_read+0x725/0xcf0 [ 96.658042][ T4620] ksys_read+0x14d/0x250 [ 96.658058][ T4620] do_syscall_64+0x4c/0xa0 [ 96.658074][ T4620] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.658094][ T4620] [ 96.658094][ T4620] -> #4 (&p->lock){+.+.}-{3:3}: [ 96.658122][ T4620] __mutex_lock_common+0x1eb/0x2390 [ 96.658156][ T4620] mutex_lock_nested+0x17/0x20 [ 96.658180][ T4620] seq_read_iter+0xad/0xd50 [ 96.658200][ T4620] do_iter_readv_writev+0x497/0x600 [ 96.658219][ T4620] do_iter_read+0x20b/0x7c0 [ 96.658236][ T4620] loop_process_work+0x18dc/0x2480 [ 96.658259][ T4620] process_one_work+0x863/0x1000 [ 96.658280][ T4620] worker_thread+0xaa8/0x12a0 [ 96.658298][ T4620] kthread+0x436/0x520 [ 96.682771][ T4618] FAT-fs (loop0): Directory bread(block 67) failed [ 96.685803][ T4620] ret_from_fork+0x1f/0x30 [ 96.685833][ T4620] [ 96.685833][ T4620] -> #3 ((work_completion)(&worker->work)){+.+.}-{0:0} [ 96.703503][ T4618] FAT-fs (loop0): Directory bread(block 68) failed [ 96.707087][ T4620] : [ 96.707095][ T4620] process_one_work+0x7bf/0x1000 [ 96.707121][ T4620] worker_thread+0xaa8/0x12a0 [ 96.707140][ T4620] kthread+0x436/0x520 [ 96.732649][ T4618] FAT-fs (loop0): Directory bread(block 69) failed [ 96.737279][ T4620] ret_from_fork+0x1f/0x30 [ 96.737461][ T4620] [ 96.737461][ T4620] -> #2 ((wq_completion)loop2){+.+.}-{0:0}: [ 96.737723][ T4620] flush_workqueue+0x142/0x1380 [ 96.761933][ T4618] FAT-fs (loop0): Directory bread(block 70) failed [ 96.765752][ T4620] drain_workqueue+0xcf/0x380 [ 96.765900][ T4620] destroy_workqueue+0x7b/0xb20 [ 96.766029][ T4620] __loop_clr_fd+0x234/0xb90 [ 96.766144][ T4620] blkdev_put+0x53f/0x7d0 [ 96.790907][ T4618] FAT-fs (loop0): Directory bread(block 71) failed [ 96.795450][ T4620] deactivate_locked_super+0x93/0xf0 [ 96.795480][ T4620] cleanup_mnt+0x418/0x4d0 [ 96.795500][ T4620] task_work_run+0x125/0x1a0 [ 96.795521][ T4620] exit_to_user_mode_loop+0x10f/0x130 [ 96.795543][ T4620] exit_to_user_mode_prepare+0xb1/0x140 [ 96.795564][ T4620] syscall_exit_to_user_mode+0x16/0x40 [ 96.795585][ T4620] do_syscall_64+0x58/0xa0 [ 96.795600][ T4620] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.795621][ T4620] [ 96.795621][ T4620] -> #1 (&lo->lo_mutex){+.+.}-{3:3}: [ 96.795653][ T4620] __mutex_lock_common+0x1eb/0x2390 [ 96.795674][ T4620] mutex_lock_killable_nested+0x17/0x20 [ 96.795694][ T4620] lo_open+0x6a/0x100 [ 96.795711][ T4620] blkdev_get_whole+0x90/0x390 [ 96.795745][ T4620] blkdev_get_by_dev+0x2d0/0xa60 [ 96.795764][ T4620] blkdev_open+0x12d/0x2c0 [ 96.795779][ T4620] do_dentry_open+0x7ff/0xf80 [ 96.795799][ T4620] path_openat+0x2682/0x2f30 [ 96.795816][ T4620] do_filp_open+0x1b3/0x3e0 [ 96.795833][ T4620] do_sys_openat2+0x142/0x4a0 [ 96.795854][ T4620] __x64_sys_openat+0x135/0x160 [ 96.795875][ T4620] do_syscall_64+0x4c/0xa0 [ 96.795891][ T4620] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.795917][ T4620] [ 96.795917][ T4620] -> #0 (&disk->open_mutex){+.+.}-{3:3}: [ 96.795945][ T4620] __lock_acquire+0x2c33/0x7c60 [ 96.795966][ T4620] lock_acquire+0x197/0x3f0 [ 96.795985][ T4620] __mutex_lock_common+0x1eb/0x2390 [ 96.796004][ T4620] mutex_lock_nested+0x17/0x20 [ 96.796023][ T4620] bd_register_pending_holders+0x33/0x310 [ 96.796046][ T4620] device_add_disk+0x5a7/0xd40 [ 96.796065][ T4620] md_alloc+0x809/0xc00 [ 96.796086][ T4620] blk_request_module+0x26e/0x290 [ 96.796103][ T4620] blkdev_get_no_open+0x38/0x1d0 [ 96.796124][ T4620] blkdev_get_by_dev+0x77/0xa60 [ 96.796145][ T4620] swsusp_check+0x9b/0x2a0 [ 96.796164][ T4620] software_resume+0xc6/0x3b0 [ 96.796183][ T4620] resume_store+0xe4/0x130 [ 96.796203][ T4620] kernfs_fop_write_iter+0x379/0x4c0 [ 96.796225][ T4620] vfs_write+0x712/0xd00 [ 96.796240][ T4620] ksys_write+0x14d/0x250 [ 96.796255][ T4620] do_syscall_64+0x4c/0xa0 [ 96.796270][ T4620] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.796287][ T4620] [ 96.796287][ T4620] other info that might help us debug this: [ 96.796287][ T4620] [ 96.796293][ T4620] Chain exists of: [ 96.796293][ T4620] &disk->open_mutex --> major_names_lock --> disks_mutex [ 96.796293][ T4620] [ 96.796324][ T4620] Possible unsafe locking scenario: [ 96.796324][ T4620] [ 96.796329][ T4620] CPU0 CPU1 [ 96.796334][ T4620] ---- ---- [ 96.796339][ T4620] lock(disks_mutex); [ 96.796350][ T4620] lock(major_names_lock); [ 96.796365][ T4620] lock(disks_mutex); [ 96.796378][ T4620] lock(&disk->open_mutex); [ 96.796391][ T4620] [ 96.796391][ T4620] *** DEADLOCK *** [ 96.796391][ T4620] [ 96.796395][ T4620] 7 locks held by syz.3.113/4620: [ 96.796406][ T4620] #0: ffff888029f25270 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2bf/0x370 [ 96.796587][ T4620] #1: ffff88807ecac460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x28a/0xd00 [ 96.796942][ T4620] #2: ffff88806104d488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e5/0x4c0 [ 96.797155][ T4620] #3: [ 96.828354][ T4618] FAT-fs (loop0): Directory bread(block 72) failed [ 96.831446][ T4620] ffff888144bfd830 (kn->active#515){.+.+}-{0:0} [ 96.849058][ T4618] FAT-fs (loop0): Directory bread(block 73) failed [ 96.852611][ T4620] , at: kernfs_fop_write_iter+0x208/0x4c0 [ 97.346053][ T4620] #4: ffffffff8bfd5188 (system_transition_mutex/1){+.+.}-{3:3}, at: software_resume+0x7c/0x3b0 [ 97.356564][ T4620] #5: ffffffff8c6fa808 (major_names_lock){+.+.}-{3:3}, at: blk_request_module+0x31/0x290 [ 97.366979][ T4620] #6: ffffffff8cf7e148 (disks_mutex){+.+.}-{3:3}, at: md_alloc+0x48/0xc00 [ 97.375855][ T4620] [ 97.375855][ T4620] stack backtrace: [ 97.381772][ T4620] CPU: 0 PID: 4620 Comm: syz.3.113 Not tainted syzkaller #0 [ 97.389470][ T4620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 97.399659][ T4620] Call Trace: [ 97.403184][ T4620] [ 97.406202][ T4620] dump_stack_lvl+0x168/0x230 [ 97.411169][ T4620] ? load_image+0x3b0/0x3b0 [ 97.415911][ T4620] ? show_regs_print_info+0x20/0x20 [ 97.421419][ T4620] ? print_circular_bug+0x12b/0x1a0 [ 97.426748][ T4620] check_noncircular+0x274/0x310 [ 97.431726][ T4620] ? add_chain_block+0x940/0x940 [ 97.436698][ T4620] ? lockdep_lock+0xdc/0x1e0 [ 97.441328][ T4620] ? mark_lock+0x94/0x320 [ 97.445820][ T4620] __lock_acquire+0x2c33/0x7c60 [ 97.451241][ T4620] ? verify_lock_unused+0x140/0x140 [ 97.456486][ T4620] ? kernfs_add_one+0x55d/0x6c0 [ 97.461381][ T4620] ? __lock_acquire+0x7c60/0x7c60 [ 97.466955][ T4620] ? rwsem_write_trylock+0x12f/0x1b0 [ 97.472382][ T4620] lock_acquire+0x197/0x3f0 [ 97.476935][ T4620] ? bd_register_pending_holders+0x33/0x310 [ 97.482966][ T4620] ? __might_sleep+0xf0/0xf0 [ 97.488035][ T4620] ? read_lock_is_recursive+0x10/0x10 [ 97.493452][ T4620] ? kernfs_create_dir_ns+0x10e/0x120 [ 97.498874][ T4620] ? sysfs_create_dir_ns+0x120/0x280 [ 97.504336][ T4620] ? sysfs_create_dir_ns+0x15b/0x280 [ 97.509675][ T4620] ? kobject_create_and_add+0x57/0x230 [ 97.515174][ T4620] ? device_add_disk+0x568/0xd40 [ 97.520358][ T4620] ? md_alloc+0x809/0xc00 [ 97.525048][ T4620] ? bd_register_pending_holders+0x33/0x310 [ 97.531010][ T4620] __mutex_lock_common+0x1eb/0x2390 [ 97.536296][ T4620] ? bd_register_pending_holders+0x33/0x310 [ 97.542337][ T4620] ? sysfs_create_groups+0x9c/0x120 [ 97.547596][ T4620] ? kernfs_get+0x56/0x90 [ 97.551976][ T4620] ? kobject_add_internal+0x92f/0xd00 [ 97.557568][ T4620] ? mutex_lock_io_nested+0x60/0x60 [ 97.562817][ T4620] ? kobject_add+0x152/0x210 [ 97.567700][ T4620] ? kobject_init+0x1d0/0x1d0 [ 97.572511][ T4620] mutex_lock_nested+0x17/0x20 [ 97.577423][ T4620] bd_register_pending_holders+0x33/0x310 [ 97.583196][ T4620] ? kobject_create_and_add+0x174/0x230 [ 97.589022][ T4620] device_add_disk+0x5a7/0xd40 [ 97.593833][ T4620] ? __alloc_disk_node+0x44e/0x4e0 [ 97.599115][ T4620] md_alloc+0x809/0xc00 [ 97.603450][ T4620] ? mddev_delayed_delete+0x30/0x30 [ 97.608831][ T4620] blk_request_module+0x26e/0x290 [ 97.613905][ T4620] blkdev_get_no_open+0x38/0x1d0 [ 97.618892][ T4620] blkdev_get_by_dev+0x77/0xa60 [ 97.623867][ T4620] ? __pm_pr_dbg+0xa0/0x190 [ 97.628439][ T4620] swsusp_check+0x9b/0x2a0 [ 97.632893][ T4620] ? swap_read_page+0x2f0/0x2f0 [ 97.637783][ T4620] ? resume_store+0xa2/0x130 [ 97.642417][ T4620] ? kfree+0xef/0x2a0 [ 97.646676][ T4620] software_resume+0xc6/0x3b0 [ 97.651403][ T4620] resume_store+0xe4/0x130 [ 97.655960][ T4620] ? sysfs_kf_read+0x310/0x310 [ 97.660763][ T4620] kernfs_fop_write_iter+0x379/0x4c0 [ 97.666235][ T4620] vfs_write+0x712/0xd00 [ 97.670548][ T4620] ? file_end_write+0x250/0x250 [ 97.675549][ T4620] ? __fget_files+0x40f/0x480 [ 97.680393][ T4620] ? mutex_lock_nested+0x17/0x20 [ 97.685370][ T4620] ? __fdget_pos+0x2bf/0x370 [ 97.689996][ T4620] ? ksys_write+0x71/0x250 [ 97.694556][ T4620] ksys_write+0x14d/0x250 [ 97.699053][ T4620] ? __ia32_sys_read+0x80/0x80 [ 97.703868][ T4620] ? lockdep_hardirqs_on+0x94/0x140 [ 97.709137][ T4620] do_syscall_64+0x4c/0xa0 [ 97.713599][ T4620] ? clear_bhb_loop+0x30/0x80 [ 97.718308][ T4620] ? clear_bhb_loop+0x30/0x80 [ 97.723022][ T4620] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.729369][ T4620] RIP: 0033:0x7f5e2bb31be9 [ 97.733851][ T4620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.753686][ T4620] RSP: 002b:00007f5e29d99038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 97.762360][ T4620] RAX: ffffffffffffffda RBX: 00007f5e2bd68fa0 RCX: 00007f5e2bb31be9 [ 97.770383][ T4620] RDX: 0000000000000012 RSI: 0000200000000000 RDI: 0000000000000006 [ 97.778392][ T4620] RBP: 00007f5e2bbb4e19 R08: 0000000000000000 R09: 0000000000000000 [ 97.786404][ T4620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.794475][ T4620] R13: 00007f5e2bd69038 R14: 00007f5e2bd68fa0 R15: 00007ffdd1394d18 [ 97.794508][ T4620] [ 97.829108][ T4620] PM: Image not found (code -6) [ 97.992147][ T4624] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 98.009806][ T4624] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.465745][ T4624] EXT4-fs error (device loop2): __ext4_new_inode:1076: comm syz.2.112: reserved inode found cleared - inode=1