last executing test programs: 1m13.818561839s ago: executing program 4 (id=5): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01060000000000000000090000005c0004801300010062726f6164636173742d6c696e6b000044000780080001001d000028"], 0x70}}, 0x0) 1m13.733760408s ago: executing program 4 (id=9): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1000e, &(0x7f00000002c0)={[{@init_itable}, {@resuid}, {@stripe}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x440480, 0xe4) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000340)=ANY=[], 0x700, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x2, 0x1, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4) open(&(0x7f0000000240)='./bus\x00', 0x10840, 0x81) ioctl$TCSETSF2(r0, 0x4b4c, &(0x7f00000000c0)={0xc7b, 0x0, 0x0, 0x0, 0x0, "99ea94b5360f4a5ece030668900f9e0d81d19c"}) chdir(&(0x7f00000001c0)='./file0\x00') truncate(&(0x7f0000000280)='./file1\x00', 0x0) gettid() 1m12.977251547s ago: executing program 4 (id=13): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) close(r1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000280)='./file0\x00') unshare(0x80) creat(&(0x7f0000000300)='./bus\x00', 0x15d) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r7 = open(&(0x7f0000000000)='./file0\x00', 0x143042, 0xfe) r8 = syz_open_procfs(0x0, &(0x7f00000003c0)='gid_map\x00') pread64(r8, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) ftruncate(r7, 0x2008002) socket$vsock_stream(0x28, 0x1, 0x0) sendfile(r6, r7, 0x0, 0x80000001) 1m8.866465495s ago: executing program 4 (id=23): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) 1m8.549859804s ago: executing program 32 (id=23): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) 28.901743322s ago: executing program 3 (id=135): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x26}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors_recursive\x00', 0x26e1, 0x0) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x84515000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000003680)='sched_switch\x00', r3}, 0x10) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000004c0)=ANY=[], 0x6, 0x2da, &(0x7f0000000a40)="$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") ioctl$SIOCSIFHWADDR(r0, 0x8b2b, &(0x7f0000000000)={'wlan1\x00', @random="001600000600"}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e20, @multicast2}, {0x0, @broadcast}, 0x8, {0x2, 0x0, @private}, 'veth0\x00'}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0xfff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 18.762091794s ago: executing program 3 (id=154): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) syz_emit_ethernet(0x326, &(0x7f0000000780)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x2f0, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x1, 0x0, 0x0, [{0x3, 0x5, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad9657926974"}, {0x0, 0x1, "000005000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d260600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) 16.852642328s ago: executing program 5 (id=156): sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, 0x0, 0x5010) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2299c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_gettime(0x3, 0x0) clock_settime(0x0, &(0x7f00000009c0)) 16.770295688s ago: executing program 1 (id=157): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r3, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000240)='./file0\x00', 0x0) stat(&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001380)) 16.385834447s ago: executing program 1 (id=158): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = epoll_create1(0x80000) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x41) syz_open_procfs(0x0, &(0x7f0000002200)='fdinfo/3\x00') r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/wakeup_count', 0x0, 0x80) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r6, &(0x7f00000000c0)={0xe000001a}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000200)=@ethtool_ringparam={0x10, 0x80000001, 0x3, 0x1, 0xd, 0xefe, 0x0, 0x0, 0x8}}) io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0x572e, 0x2, 0x2, 0xfffffffe}) 16.385240607s ago: executing program 3 (id=159): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x40, 0x14, 0x509, 0x0, 0x25dfdbfd, {0x2, 0x1f, 0xc0, 0xcb, r2}, [@IFA_TARGET_NETNSID={0x8}, @IFA_TARGET_NETNSID={0x8, 0xa, 0xffffffff}, @IFA_RT_PRIORITY={0x8}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000680), 0x64, 0x50a, &(0x7f00000009c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0xfe37, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x280, 0x0, 0x4c, 0x1a, 0x0, 0x73, 0x1b0, 0x258, 0x258, 0x1b0, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, [0x0, 0x0, 0x0, 0xff], [], 'veth0_virt_wifi\x00', 'macvlan1\x00', {}, {}, 0x11, 0xfe}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@private2, @dev, [], [], 'veth1_macvtap\x00', 'veth0_macvtap\x00', {0xff}}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e0) recvmmsg(r0, &(0x7f0000000800), 0x62, 0x12141, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 13.390020328s ago: executing program 3 (id=162): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000340)={[{@i_version}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@data_err_abort}, {@barrier}], [{@seclabel}]}, 0x1, 0x43d, &(0x7f0000000900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x9d22f000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$usbmon(&(0x7f0000000080), 0x81, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) 13.207922868s ago: executing program 1 (id=163): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = accept4$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000100)=0x1c, 0x100400) setsockopt(r4, 0xa985, 0x7, &(0x7f0000000300)="75711f7a9721d6064daccf28fba0d89ae5ce0e1ab6c7b4d216b2528e6ee2672b8cafcbe29b31582fdc36c46ee972cc0db4b8d0fd809f2bce995375ea1d67eeb08ee8f4102ac0e5efa41163a766e259b40e2b2ce3e1218ecb9e64d5edaa47183b5ca120fb3213e57ff7a411eb4c07d34549bee2479c04c80a68a06f5e918d7e7fcaf92bd55cefac7ac6395b0473202f56c53467201c30f119185e399007288733c6608be16fe03da96087cac578b78f686961ee3019b1bb0d68417dc24db6a9ecbb15ef3b7a22e67e686b3902dca7c71a17374b7a7edba6d6c653ffb0fa60aeac7f5af18dfa199bc030810216fe07a8ee8f497215", 0xf4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) socket(0x10, 0x803, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000180)='FREEZING\x00', 0x9) 12.660380806s ago: executing program 5 (id=164): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x26}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors_recursive\x00', 0x26e1, 0x0) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x84515000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000003680)='sched_switch\x00', r3}, 0x10) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000004c0)=ANY=[], 0x6, 0x2da, &(0x7f0000000a40)="$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") ioctl$SIOCSIFHWADDR(r0, 0x8b2b, &(0x7f0000000000)={'wlan1\x00', @random="001600000600"}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e20, @multicast2}, {0x0, @broadcast}, 0x8, {0x2, 0x0, @private}, 'veth0\x00'}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0xfff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 10.932709691s ago: executing program 1 (id=167): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], 0x0, 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) close(r1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x15d) open(&(0x7f0000000000)='./file0\x00', 0x143042, 0xfe) r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='gid_map\x00') pread64(r6, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) socket$vsock_stream(0x28, 0x1, 0x0) 10.070292619s ago: executing program 3 (id=171): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000100)=0x80000001, 0x8) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 6.95862041s ago: executing program 3 (id=174): sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, 0x0, 0x5010) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2299c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_gettime(0x3, 0x0) clock_settime(0x0, &(0x7f00000009c0)) 6.700487189s ago: executing program 0 (id=176): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000180)={0x7, 0x7}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r5, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1) write$UHID_INPUT(r6, &(0x7f0000000d00)={0x8, {"7894e6e62ce0f10fcdce74f21ad5b47c923d4dec90cefd599912070f341d59a8802e33af9869738f25b2f72093dd0ffa688e8e417c6e0e09b99649818d7caca39e142ef69d9101397854c3f51bde013686a626b2120c03d98c0ad981069188fbbddb88bf41a6b29ed43d1244e6025e1e4a2f40577619ccee39385bfc86461023a7906e5c07d16415140f4ab26db004362c885ef2c9ee82d3dd7e2ac42ca05d81ccea87dc0ec4a8f222013d6d4d0b0c828f3d2e3151dce87bfb335c1ad67bb3323564022ab23a6ba54ca117ca592c8d4227922347ea6f7c9d3dbdbc8d235f2d03e688d5ca7718d60e911534f964bf20359a0057847e7d7fd2cc463784aab2b06ba95512cfc427da44aa73634b0797b9baab391aa176d259c047ee9d346e63903860ab3c571d064509a715c5c4c6edffce9e1701e8291c2d937e3ff18691fe9a665b1a3b717a40205f8efa239b37e6b33f5c8ac28e616f788d0294c8d39ff4a63aaca7d4c578a935dd84850432201081bc1b00c5797847eaff8cecf8af8a60f075b5ff1c3dc9e62f9a3cfc4333a7501dd8badfdc691a9d35d3fc2c0e8f1b21a2c619201004a0d82bace1738ba9ca93e6fbf8ebaa78b5423efb19d3337ad050a7a1a634737a0169921911b277ab235f8b186efd60c3eff58e974a856ba460c5fbd91c1b5c999a7f6b4474560e0c5698085e1ff96381999bf7338dddab4499c6ae315245ecc98d3ca2ebc11214a4115e9205e7d1705591be4029a5e92ae06c02ba39ac70cf1ba082ccee070bf2feafa55ac6e863adb6f89a7475c2dc073058b0f8a52151d8c3ced025463656942bfd257ace6c54bd57985a44cef1c20777db47d12bd34371ef6f537e455b7787e3a853713877fa9465937602ceef8b9439507ab802ea4eaf5ee2ecd710b1840d8b8c995b5904434198abd8f0e830857ed1af53f3bcede9d57afb1cd7ad27bf222a6d1c58286c40d22211a3b2b7b7bbf5923a528fa4d781aaec1f67e013392b17197d2f6ff2d0e68bea94ce57cc516daffdf2348333a8dc596894540aa2a79437d95465fc27627b0e26871d5248c39e1a3badb319d449a7d67145418e1a35cb4bf950a5483d6e80763ea676b89d1f1e2cea20c590c76ae9fb228ffd638ccabdb3830cf944e1cccfb7ba8b1d1f0aabc498155ddda8404ebe2e25cfcfa9058af7d66bef79e592a579d556404ea3f28d6ddb3fdead9123247e23827f729eee41540d0f0e94027d65eee4e7c1c913c634f9abf546388cd2e4b351b16bd97faae3b54f5b2750495619ec36d97a1080564fa30a9f8a2700b77340b5bbd9cc377ee35420b5b762935047af7837e973a9da42ef93c11f145704d041054bcc4680363cbbee16a2bc0eaaa49cfa23330a666dff32daa17a6ea425f1ed2354d0c36893c895a0564e100d3e1385467405ca2706cfb62453faf72b1648727faeffb3c934bc4e48e4ce93af11bff3208cb3843da7ed68451b4af747ef72e2fb78a73990c95097c9504aacddffc5caadeb171e95ad113561144907d361fd28695239f6619360b9d0eead653cc83ab13fc7c0c60237e3363b6f319daa38d792426393e2396404a112ed9e70b378f494d4b540bf9b44d76b347a12c8cdaeed350a85698eb71bd126f75b9aa0ff7435926a4a4ce04e4187eae5a80b1ff56aa7f1b005a9a057b6ace4cf08c404f66c0b31974d151e9a2840ebcbfbfd898e6694b89fe78a68b90551c9d33c14914dceff64a699c1cf1570c2d1f53e905abef9f954fbdd100b1b18f10dbd673bd6c7a9693286cf2dc0ab9919466750aa42ccfa27e9ff4190dd784ec6f2e19270521f98561a959152b16a80f0b1e183375d3886936ae03ff4949777d30481c24bbae918d5fdcc8f46ff05e2370095bc85cde086dc1e32423f21c13c42490fb679462f35dd0c4ef06f8c3f24327af47ea2c73a856f112385094fe138022e308c157adb19b94ed0e8d94b805883318b33b22f371d62f0b764b2a44b65018bef417357aa997ea4ef95a2899963e06a3c553943e14d3364b73919f5e6d8395d56d522f1b19ae37d48f1534d92e4248824adb555281aea2fb317bfb30cdc7d4efada900006f45578a061b19e2eeefffdbf1974a1633182501611724079f926122c1c8fd9b1d8e6302d76ed90616abcfcac478e3b8d3be91eee5f9c653f8fed3afc1eb33d9314aaa021e8b53ab7ba3e59b301a6c757efd95c6661d7d3e8a73cdec7833f4608dc238d8e144a5b0196a9aea6fb30efdfdb05f9529c52af93cd78d857e3cc920bf30b2292380c662890f3679c09aea55c77a75dbb4da338c0fb737a5fc31252d9fa798f9dd70947f6cfa0474a7a835c694dfbb5c678216915d1f04c81d5df8f2efde80fdbce8248525d9b639f394847b9a8c2e7f7288b031df91db059eabb750c1bfe732b78001c2cca0f74cd8873cc2a892d26e1dbd48db297853775c21d68ce1daebee4f4d65bf8e448b1c80da35eaff3295ffe0aef68baff15f7585aba741699c3ed9a62f2c18200e40cbb383b844459ca9636d61645470d4f8b04704b84a7986d816c037d368d807ab936faa842a427cc4987ab506f3f08841195c893f39656547ff62730ec43aa78311d57defe4002301f6b9e1f6573f3a46715e2d1f899480e8bc97f5dfe48ad14df280126998d32dc0a63231584b5ee82d5f90d5ccd3eb3923cee0dfe0eb9b1ac54fd97214ad86c6459cf916ba0bfc9d4210a95346d753f4bc7440d78274c4cd1850907a2bf150a1c1b511bf0438494a6aa1a197f787c96b410d866b4cb284f74122ffbb2f5fa7c2c22f935c7e1542ff83f01e3024ee6e3d7fd0fba2754e635c8116a27f15586300d6522979822c1f97038f33c644ef82e9818f4a09388cb9a69514c929e9bc149fd7a26b458d89abb5e3ae1de29ed1f28d613878a24a9296c967339b9c6749f92c720982cb78a120bcf7593c6fbae36f9a06caa384a7e5d3f05442b0a69f72518a76a916968aae56abda54dac318fd726335e95592f80d030ef51aea41d5e348267fcea65e49d8e36e711fedb3fb9ad37d3fdf2185dcc3ff44736d6a0d4b4bd1810f89ec6e0e6b6f58f74d73ddd2a27fcfaf36d1aec6c3769787a1d3b8514487a399e6497bd0bf4c4242868d599aeb2202cae535e8118d478fc43b4c8bfdcf024f36f5d7c9f75c69bc9d4d5414e8bef740bcaf9027dbdb0f47643b984406c9ce1999d7631243c26d6824ae74ab71f536e40e934a5dfea7f5c5d10713c831df6ba168f4080a4b082e94bc23c0807aab7c0bc29f327d185a2a9302cc255aa54764c4eb8ef5b17d640afa30b36572294914d51ac146f87af6f5abd97823724aba25f589e769aa1047e72365e9ee67e7f90e80542cc842aebabc97679dd893075e8a1bd6934ac9e768e20bcf4c2fa29c5f7a103d3ff689c721e08ef1d0ca61ee3e07a815aa943879dd5c406dcff6a946b0a12980620cfb224912e27accbb63b1e2d571c65918c806060dcd08d5cef341e5c5705021ec19605b809a44d2a8f6f27e18f2b8fd268e23706564df5501096fd8f8261e27d5c8b582673f0c76bf78b27f754cddb5b64a33c87841681d8eef2b5abe8a8deabee587189f75b8b518909cd2a6f89910425e8647f25077829f1b400b3abcaeff6f54ccc00f6fb7abeeefe0226e4e2b55fba0925b49be8310fc5a490384e4a5e7216b0fd0c09c00e3327ada8c59eb37443ac9148a9df92b0d4e6851cd93b784d3e0a236d9fe7c483f03d813fc98e632cf6255dc4a70a0458570776509ebfb545f35956c7e32493f6ad886ec858bfc29bffb7f2ae7eed7d83e3075554dd81e72c93f4c2e4dcdb0832e76861b983b17c2a6f887a988e4fd47459fd45134560b5b1bec10c50914f2d7f327a4e68a0c453f067035f243ca01aa22969481d5fb48d1da82f35222c4e8d249625c454159f7b00a85d43414eb5e7c8044922b323f2473af648d1dba5ffff34bd5e023a2fe4860d7568fa4d35ad20c461eb38bced561edcef853dbcdd7b69bb40e9cda525a71a286c956a1268cacad0bc0c79ed7632aedbb8dc78ba1a2adea2b650314072d1ebc08f9753d6d38e53a758ea4700160588e819239711a506f004ec57037cd6efcbb9cee3bba556eaaa008bf8e8390085b85653c7aa006dd836c7ad025bed9dec77a4a00b309776862fca4dd01dff16aa6bd70a876662093b85ffbb07b2f8b4361f5dc635f940571239a71865e8f1a289f449ae9a74266205c8b1fe8a732db502c9ea5e5c379b704d43ef795b40450aa498535803767d2c2cbd2749474d2997e00f37612fcc0ae7322b8c8e2a90cf66ada69bd05b82d5707562b37e40674f0a3f58d9c776a931b8768d5c23f17c5f9135e7a4ce0c6eb356d9fb4a53d112194c19e6f045d2bd44132a70b9ccd7e65d2787899785f7ee9185589136c847347142440e0a405c18ff3f31acb791a805dd281aaf97aee708dcce2f1aa53161b7716fa0978c0d02871637ad7e1af5a158b727a1dfc2ae1aafbb9c516469ee89fa0f1de23a17115ded5e9c560a468c5192943be74aeaba51083ca0379563f1fa78e29eca1eaf849cd00f419ceb59e640248c332c845e68e9a398281b962ae59aa5b18006b6ea6e0c5f1b30665e1fb975da11ed6a47bd44b4241bbf0443f178e8249805cc3f980a4bb2f46baab0a12e9e9b2aaa7e0ca22b2314a9e5ef6412f4efe31381e3d716244af3112444eabbb0c353acafc0f1179ad4c63b81e5f5bfd771591d24e5254fa72e30aa53717c24b49cee71cdd9368e207af5e992a04f06de912cfcfca38732f5c8393d466d209680ebfa5764897f04531138beff3f65691593e334c2ae2825ffa9353e8aeef37b90691ea5c78d7c86124abf6491a068bf03c3467e5e42ca4b58192d17856722207568777141ccbef3f3891708897af9c196be92056527a8da820d28dccaf4dfed4d38fb8fe826b238d31bad751631a0d8b1eabdfa7bffe65241238ff982d21b2222cdd3a536385d0ab2180ccdf4672d0b21156377fe640ee8c8744b9ba1efce91c295e83a4271a34a1f70adbc2ff0aa6ba9e1965061cadcd3d824636bbc1f977c78dde1859d752c86b099705616edf6e94523f108af79ab5073d26f3788c4d56f1b17b764c1bc387e531dab5dd71198c56b02c68552dc1098beec85dc1bbe2dde316e6093a9a33f578d789da9b2a9209ed6e73a0597bc62467afc42f0348c9b885b92f37569a953f6316d5c8b188539474da3836abeae7ec259cf8fd28f02593597e9206e05e8da4f4346aab36f179deb68a9dab9b550d6fe4f0c88563935328a699b9cbb2015be57c28beaf60be499114f04a96a2f7fb3bf3b5b31e422954c96790aa1e49c5bc1946df0df2b4be63c0aac1ddcf187714f6e67a076a823feaeba5db4a99e5f494ec939d1b0ecd23752c08c3b788704612127e7f080ef581b4990accd6dca7ce52844bc7bbc8c8752497c171d8e628c53609a920fb5a1bc740cb05e2035de72f636ef0498ed2f3cccb64d5740afbc30015442ca0511160787b2c763072c70035f7f3bbbd3966bcc80d021ce1482e27681b963a28189c2ee9d64d0622a94eac689d3fc1a4137c4d62a4c73fab4b0175a8ff8fa256118affd94aaeee33b155043f53d9e3d4eb82173df0938c6c3e51c118c1acf187c84f12090ad1dd663013e433455290f87ca88959f9f481e4dd05e6a483abe00f7c974e5ff602a7a6eaa71f8ac06c50afac0c2858b554f59bf88002766a619ae9b0864926d07b273238e1ebd456543f77ea800231dbf4479f0b90fc607", 0x1000}}, 0x1006) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f00000000c0)={[{@grpjquota, 0x4a}, {@debug}, {@debug}, {@noquota}, {@bsdgroups}, {@usrjquota, 0x22}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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") 5.950548897s ago: executing program 2 (id=177): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062430bc068829afff36b31fa7e35ce9"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0x20, 0x0, &(0x7f0000000240)="5cdd3086ddff0066b3c9bbac88a8862c00dffd0013dd00000000000000008100", 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.291803685s ago: executing program 2 (id=178): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = accept4$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000100)=0x1c, 0x100400) setsockopt(r4, 0xa985, 0x7, &(0x7f0000000300)="75711f7a9721d6064daccf28fba0d89ae5ce0e1ab6c7b4d216b2528e6ee2672b8cafcbe29b31582fdc36c46ee972cc0db4b8d0fd809f2bce995375ea1d67eeb08ee8f4102ac0e5efa41163a766e259b40e2b2ce3e1218ecb9e64d5edaa47183b5ca120fb3213e57ff7a411eb4c07d34549bee2479c04c80a68a06f5e918d7e7fcaf92bd55cefac7ac6395b0473202f56c53467201c30f119185e399007288733c6608be16fe03da96087cac578b78f686961ee3019b1bb0d68417dc24db6a9ecbb15ef3b7a22e67e686b3902dca7c71a17374b7a7edba6d6c653ffb0fa60aeac7f5af18dfa199bc030810216fe07a8ee8f497215", 0xf4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) socket(0x10, 0x803, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000180)='FREEZING\x00', 0x9) 5.182199975s ago: executing program 0 (id=179): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sysvipc/shm\x00', 0x0, 0x0) readlinkat(r2, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)=""/128, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r6}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) sendto$inet6(r5, &(0x7f0000000440)="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", 0xfff4, 0x0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo\x00') 4.111911002s ago: executing program 2 (id=180): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, 0x0, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x50, 'cpu'}]}, 0x5) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, 0x0, 0x0) 4.111281212s ago: executing program 0 (id=181): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000340)={[{@i_version}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@data_err_abort}, {@barrier}], [{@seclabel}]}, 0x1, 0x43d, &(0x7f0000000900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x9d22f000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$usbmon(&(0x7f0000000080), 0x81, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) 4.009534561s ago: executing program 5 (id=182): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) syz_emit_ethernet(0x33a, &(0x7f0000000780)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x304, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x1, 0x0, 0x0, [{0x3, 0x7, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e340606"}, {0x0, 0x1, "000005000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d260600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) 3.124725209s ago: executing program 2 (id=183): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r5, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r5, &(0x7f0000000100)='./file1\x00', r5, &(0x7f0000000240)='./file0\x00', 0x0) stat(&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001380)) 3.027580639s ago: executing program 1 (id=184): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000100)=0x80000001, 0x8) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 3.000886419s ago: executing program 5 (id=185): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = epoll_create1(0x80000) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x41) syz_open_procfs(0x0, &(0x7f0000002200)='fdinfo/3\x00') r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/wakeup_count', 0x0, 0x80) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r6, &(0x7f00000000c0)={0xe000001a}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000200)=@ethtool_ringparam={0x10, 0x80000001, 0x3, 0x1, 0xd, 0xefe, 0x0, 0x0, 0x8}}) io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0x572e, 0x2, 0x2, 0xfffffffe}) 2.974822028s ago: executing program 2 (id=186): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x40, 0x14, 0x509, 0x0, 0x25dfdbfd, {0x2, 0x1f, 0xc0, 0xcb, r2}, [@IFA_TARGET_NETNSID={0x8}, @IFA_TARGET_NETNSID={0x8, 0xa, 0xffffffff}, @IFA_RT_PRIORITY={0x8}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000001700)=0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000680), 0x64, 0x50a, &(0x7f00000009c0)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0xfe37, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x280, 0x0, 0x4c, 0x1a, 0x0, 0x73, 0x1b0, 0x258, 0x258, 0x1b0, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, [0x0, 0x0, 0x0, 0xff], [], 'veth0_virt_wifi\x00', 'macvlan1\x00', {}, {}, 0x11, 0xfe}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@private2, @dev, [], [], 'veth1_macvtap\x00', 'veth0_macvtap\x00', {0xff}}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e0) recvmmsg(r0, &(0x7f0000000800), 0x62, 0x12141, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 1.343627144s ago: executing program 0 (id=187): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/14], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = gettid() r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x1ff) write$binfmt_elf32(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c460000004000000000000000000300030000000000000000003800"/40], 0x158) write$binfmt_elf64(r5, &(0x7f000001dac0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x3, 0x1000003, 0x0, 0x5}, {}], "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", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xee0) close(r5) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) 1.342919174s ago: executing program 5 (id=188): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062430bc068829afff36b31fa7e35ce95d"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0x20, 0x0, &(0x7f0000000240)="5cdd3086ddff0066b3c9bbac88a8862c00dffd0013dd00000000000000008100", 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.080479423s ago: executing program 1 (id=189): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x100000, @empty, 0x9}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) mount$9p_unix(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x200002, &(0x7f0000000300)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0d00000004000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00d4340000000000000000e600"/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_CREATE2(r4, &(0x7f00000004c0)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x2, 0x1aa0, 0x2, 0x386, 0x1, 0xffffffc0, "3bba"}}, 0x11a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r5, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="01"], 0x9) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) 543.221261ms ago: executing program 5 (id=190): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = accept4$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000100)=0x1c, 0x100400) setsockopt(r4, 0xa985, 0x7, &(0x7f0000000300)="75711f7a9721d6064daccf28fba0d89ae5ce0e1ab6c7b4d216b2528e6ee2672b8cafcbe29b31582fdc36c46ee972cc0db4b8d0fd809f2bce995375ea1d67eeb08ee8f4102ac0e5efa41163a766e259b40e2b2ce3e1218ecb9e64d5edaa47183b5ca120fb3213e57ff7a411eb4c07d34549bee2479c04c80a68a06f5e918d7e7fcaf92bd55cefac7ac6395b0473202f56c53467201c30f119185e399007288733c6608be16fe03da96087cac578b78f686961ee3019b1bb0d68417dc24db6a9ecbb15ef3b7a22e67e686b3902dca7c71a17374b7a7edba6d6c653ffb0fa60aeac7f5af18dfa199bc030810216fe07a8ee8f497215", 0xf4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) socket(0x10, 0x803, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000180)='FREEZING\x00', 0x9) 505.101672ms ago: executing program 0 (id=191): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r3, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000240)='./file0\x00', 0x0) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') stat(&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001380)) 412.114091ms ago: executing program 2 (id=192): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sysvipc/shm\x00', 0x0, 0x0) readlinkat(r2, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)=""/128, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) sendto$inet6(r5, &(0x7f0000000440)="bb699ad135cc241d3bebde2c24cb27cb9fe9ee0c34e804a364fc0eb46ff49fe5561375eac2516ac7ed1d57cad8df2a2e42927453480cc6c40a2287d46723d368104e43d2fb1c4ff855377f4e24d7d4a746f0cf7265cb4d4e9e10422c307254b6d8eac510b1b2c19bcee483019731a9eb03de7e6541e527f2021644e1527fb2d278753b3ae2f47ee3312d06a47b38412fbabe447a8c6d1b3fb67e6f5f3a21fc08407b3153d8a76e73491379cfe5f5f639db801f52174c742639a8a96f257a55acdee4ab551b1a84c003d1bde109972a1794e7eadb2d4bc27d2a50a0dac7e46a32e3d13cc0b8c5221b514720d094ebe88c63e07fa8aaacc9135c9f1f1b4c2cb6c7cc636fd0548fc1a0b807b800f3dd92cd4e06013891ecd5a72ee4622dbca8bcd7772f2715c6047ce8b30b7a4a7dbffe607494dd8bdc50c2b9428ddfb0d00a1b76ec88be09e6d4fe113d1549d50f52c149a0a25de0c383f32eb8d89e7df23831a7aa8ed93aa1f48c3c0d4df42d229fab2ccd5c473ccfa226519714536a8d0bdb1255a399b547887beeef8dd6b18d68f484edb2514b5e5fdc2f328e3160246fb0065e9958e51745d96bf501855d13b51ff03e2fa0c40d0530349a92888712d5", 0xfff4, 0x0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo\x00') 0s ago: executing program 0 (id=193): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) sched_setscheduler(0x0, 0x6, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) kernel console output (not intermixed with test programs): DUID 00:04:e4:c6:50:7c:d0:20:e3:9c:0b:ff:93:a0:6d:15:c2:87 forked to background, child pid 3838 [ 27.887663][ T3839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.898629][ T3839] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.137' (ED25519) to the list of known hosts. syzkaller login: [ 49.769788][ T4157] cgroup: Unknown subsys name 'net' [ 49.944467][ T4157] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.258734][ T4157] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 52.545942][ T4167] chnl_net:caif_netlink_parms(): no params data found [ 52.609127][ T4170] chnl_net:caif_netlink_parms(): no params data found [ 52.647583][ T4172] chnl_net:caif_netlink_parms(): no params data found [ 52.711797][ T4167] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.719013][ T4167] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.727221][ T4167] device bridge_slave_0 entered promiscuous mode [ 52.747026][ T4180] chnl_net:caif_netlink_parms(): no params data found [ 52.762174][ T4167] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.769235][ T4167] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.777413][ T4167] device bridge_slave_1 entered promiscuous mode [ 52.787154][ T4173] chnl_net:caif_netlink_parms(): no params data found [ 52.862148][ T4170] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.869211][ T4170] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.877269][ T4170] device bridge_slave_0 entered promiscuous mode [ 52.889299][ T4167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.913821][ T4170] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.921178][ T4170] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.928772][ T4170] device bridge_slave_1 entered promiscuous mode [ 52.937390][ T4167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.946827][ T4172] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.954141][ T4172] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.961932][ T4172] device bridge_slave_0 entered promiscuous mode [ 52.997554][ T4172] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.004885][ T4172] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.012690][ T4172] device bridge_slave_1 entered promiscuous mode [ 53.040638][ T4167] team0: Port device team_slave_0 added [ 53.048249][ T4170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.077191][ T4167] team0: Port device team_slave_1 added [ 53.083169][ T4173] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.090789][ T4173] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.098428][ T4173] device bridge_slave_0 entered promiscuous mode [ 53.107061][ T4170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.124264][ T4180] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.131370][ T4180] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.139318][ T4180] device bridge_slave_0 entered promiscuous mode [ 53.152295][ T4173] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.159681][ T4173] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.167573][ T4173] device bridge_slave_1 entered promiscuous mode [ 53.183922][ T4172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.193124][ T4180] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.200523][ T4180] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.208167][ T4180] device bridge_slave_1 entered promiscuous mode [ 53.249698][ T4172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.266589][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.273562][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.300256][ T4167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.313620][ T4173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.324893][ T4173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.336154][ T4170] team0: Port device team_slave_0 added [ 53.350380][ T4180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.359986][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.366923][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.393169][ T4167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.412562][ T4170] team0: Port device team_slave_1 added [ 53.434278][ T4180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.455061][ T4173] team0: Port device team_slave_0 added [ 53.462874][ T4172] team0: Port device team_slave_0 added [ 53.470388][ T4173] team0: Port device team_slave_1 added [ 53.500020][ T4172] team0: Port device team_slave_1 added [ 53.506176][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.513273][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.539320][ T4170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.585170][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.592323][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.618249][ T4170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.639431][ T4180] team0: Port device team_slave_0 added [ 53.650383][ T4167] device hsr_slave_0 entered promiscuous mode [ 53.657103][ T4167] device hsr_slave_1 entered promiscuous mode [ 53.671752][ T4173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.678696][ T4173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.705555][ T4173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.718284][ T4180] team0: Port device team_slave_1 added [ 53.725119][ T4172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.732282][ T4172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.758397][ T4172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.770845][ T4172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.777782][ T4172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.803861][ T4172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.816504][ T4173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.823763][ T4173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.849981][ T4173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.897962][ T4180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.904931][ T4180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.930859][ T4180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.967625][ T4180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.974608][ T4180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.000744][ T4180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.021250][ T4170] device hsr_slave_0 entered promiscuous mode [ 54.028081][ T4170] device hsr_slave_1 entered promiscuous mode [ 54.034598][ T4170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.042713][ T4170] Cannot create hsr debugfs directory [ 54.050817][ T4172] device hsr_slave_0 entered promiscuous mode [ 54.057453][ T4172] device hsr_slave_1 entered promiscuous mode [ 54.064117][ T4172] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.071868][ T4172] Cannot create hsr debugfs directory [ 54.151729][ T4173] device hsr_slave_0 entered promiscuous mode [ 54.158697][ T4173] device hsr_slave_1 entered promiscuous mode [ 54.168331][ T4173] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.175947][ T4173] Cannot create hsr debugfs directory [ 54.201252][ T4180] device hsr_slave_0 entered promiscuous mode [ 54.208047][ T4180] device hsr_slave_1 entered promiscuous mode [ 54.215199][ T4180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.223614][ T4180] Cannot create hsr debugfs directory [ 54.270244][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 54.270244][ T3562] Bluetooth: hci4: command 0x0409 tx timeout [ 54.270755][ T3562] Bluetooth: hci3: command 0x0409 tx timeout [ 54.294400][ T3562] Bluetooth: hci2: command 0x0409 tx timeout [ 54.301200][ T3562] Bluetooth: hci0: command 0x0409 tx timeout [ 54.491720][ T4170] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.505391][ T4170] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.513966][ T4170] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.525219][ T4170] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.571504][ T4167] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.586625][ T4167] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.596939][ T4167] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.607763][ T4167] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.687707][ T4172] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.706279][ T4172] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.715425][ T4172] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.724952][ T4172] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.745195][ T4170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.768611][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.784590][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.803169][ T4170] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.811037][ T4173] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.820432][ T4173] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.830738][ T4173] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.839997][ T4173] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.873939][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.882959][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.893385][ T370] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.900646][ T370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.933777][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.942577][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.953920][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.962519][ T370] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.969592][ T370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.981035][ T4167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.008043][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.018124][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.034561][ T4167] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.050107][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.064506][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.073164][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.081671][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.089246][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.099010][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.121163][ T4180] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.133859][ T4170] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.144357][ T4170] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.158217][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.166526][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.175592][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.184798][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.193419][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.202197][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.209477][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.217018][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.225849][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.234470][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.242258][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.260525][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.269336][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.278337][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.285397][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.295341][ T4180] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.305022][ T4180] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.314662][ T4180] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.367648][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.383466][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.396655][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.405529][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.415428][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.442763][ T4173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.456828][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.466535][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.481984][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.491246][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.499625][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.511815][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.524828][ T4172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.534243][ T4167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.549053][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.557820][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.584033][ T4173] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.603030][ T4172] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.616461][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.627145][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.643068][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.651820][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.663753][ T4170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.674168][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.683596][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.692192][ T3088] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.699715][ T3088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.738093][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.747153][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.762759][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.773278][ T3088] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.780604][ T3088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.790263][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.798713][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.807281][ T3088] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.814345][ T3088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.822122][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.837493][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.848550][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.857259][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.864346][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.873733][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.919074][ T4173] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.930569][ T4173] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.949077][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.962286][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.975809][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.986584][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.995885][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.005209][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.014784][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.023606][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.032736][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.041685][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.050428][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.058681][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.067221][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.075893][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.084534][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.092913][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.100408][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.107824][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.116131][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.124355][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.146692][ T4180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.158024][ T4167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.166339][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.180534][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.189092][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.203117][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.218486][ T4170] device veth0_vlan entered promiscuous mode [ 56.230483][ T4172] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.244407][ T4172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.277466][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.286497][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.304008][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.313464][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.321999][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.330699][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.339187][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.347397][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.355111][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 56.365274][ T4180] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.372144][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 56.378760][ T7] Bluetooth: hci3: command 0x041b tx timeout [ 56.386165][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 56.392552][ T7] Bluetooth: hci4: command 0x041b tx timeout [ 56.398903][ T4170] device veth1_vlan entered promiscuous mode [ 56.407607][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.424058][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.437144][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.445346][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.454894][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.467042][ T4173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.480289][ T4167] device veth0_vlan entered promiscuous mode [ 56.492083][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.500986][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.509279][ T370] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.516431][ T370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.525081][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.534054][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.553643][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.562248][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.572443][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.581846][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.589449][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.597867][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.607058][ T370] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.614139][ T370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.622153][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.631051][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.671978][ T4170] device veth0_macvtap entered promiscuous mode [ 56.681783][ T4167] device veth1_vlan entered promiscuous mode [ 56.693988][ T4172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.702833][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.712768][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.720244][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.728788][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.737525][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.746091][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.755232][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.764345][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.772925][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.781798][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.790517][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.798788][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.808056][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.816831][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.828755][ T4180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.842973][ T4170] device veth1_macvtap entered promiscuous mode [ 56.878888][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.887960][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.900694][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.934100][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.949040][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.958663][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.968142][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.977441][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.994457][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.004015][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.012412][ T4173] device veth0_vlan entered promiscuous mode [ 57.028683][ T4167] device veth0_macvtap entered promiscuous mode [ 57.038618][ T4167] device veth1_macvtap entered promiscuous mode [ 57.046678][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.055869][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.065120][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.074824][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.083469][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.094634][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.114049][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.134740][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.145733][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.158150][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.165789][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.174995][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.183816][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.191824][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.199192][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.207987][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.220801][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.229025][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.242450][ T4173] device veth1_vlan entered promiscuous mode [ 57.249293][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.260445][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.272048][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.281243][ T4170] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.291046][ T4170] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.300216][ T4170] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.308883][ T4170] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.321437][ T4172] device veth0_vlan entered promiscuous mode [ 57.327936][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.336118][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.344010][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.351918][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.361108][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.380195][ T4180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.406827][ T4167] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.418971][ T4167] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.433715][ T4167] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.445138][ T4167] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.466346][ T4172] device veth1_vlan entered promiscuous mode [ 57.491908][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.507151][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.515968][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.525101][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.551899][ T4173] device veth0_macvtap entered promiscuous mode [ 57.597291][ T4173] device veth1_macvtap entered promiscuous mode [ 57.671231][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.679323][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.688712][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.696951][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.706108][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.730739][ T4172] device veth0_macvtap entered promiscuous mode [ 57.747854][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.758705][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.769928][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.780901][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.793547][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.810374][ T4172] device veth1_macvtap entered promiscuous mode [ 57.817343][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.828182][ T370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.835608][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.845793][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.846568][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.856709][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.865672][ T370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.871380][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.887721][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.898298][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.924609][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.936099][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.948201][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.958342][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.969946][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.980932][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.997713][ T4180] device veth0_vlan entered promiscuous mode [ 58.008159][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.018944][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.029207][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.040284][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.050432][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.060877][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.072179][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.086245][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.095746][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.104524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.116447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.124991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.133889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.142679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.151465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.162183][ T4173] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.171544][ T4173] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.180571][ T4173] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.189249][ T4173] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.213427][ T1235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.216842][ T4180] device veth1_vlan entered promiscuous mode [ 58.229111][ T1235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.231027][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.236673][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.256040][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.267373][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.271171][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.285679][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.295554][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.306012][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.317130][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.336587][ T4172] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.346090][ T4172] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.355625][ T4172] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.364614][ T4172] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.376286][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.384562][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.392722][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.400867][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.409281][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.430201][ T4217] Bluetooth: hci4: command 0x040f tx timeout [ 58.436360][ T4217] Bluetooth: hci1: command 0x040f tx timeout [ 58.446759][ T4217] Bluetooth: hci3: command 0x040f tx timeout [ 58.453072][ T4217] Bluetooth: hci2: command 0x040f tx timeout [ 58.459138][ T4217] Bluetooth: hci0: command 0x040f tx timeout [ 58.497434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.511773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.523577][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.554949][ T4180] device veth0_macvtap entered promiscuous mode [ 58.636576][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.646631][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.659631][ T4180] device veth1_macvtap entered promiscuous mode [ 58.758585][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.768926][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.784467][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.799171][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.816799][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.828581][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.840672][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.852203][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.863086][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.874502][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.889068][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.903430][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.933090][ T4243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.946625][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.961375][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.969956][ T4243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.981021][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.002512][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.013846][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.016841][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.028063][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.033070][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.055995][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.068801][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.087577][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.097501][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.120834][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.136576][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.162682][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.172442][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.191626][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.227674][ T4180] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.238277][ T370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.251784][ T4180] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.261268][ T370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.275332][ T4180] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.286825][ T4180] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.315017][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.438186][ T4251] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 59.482354][ T1235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.501751][ T1235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.535390][ T4253] loop3: detected capacity change from 0 to 512 [ 59.564208][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.596489][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.616527][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.648272][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.777550][ T4260] loop0: detected capacity change from 0 to 128 [ 59.809241][ T4253] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 59.838285][ T4264] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5'. [ 59.850078][ T4260] ======================================================= [ 59.850078][ T4260] WARNING: The mand mount option has been deprecated and [ 59.850078][ T4260] and is ignored by this kernel. Remove the mand [ 59.850078][ T4260] option from the mount to silence this warning. [ 59.850078][ T4260] ======================================================= [ 59.875688][ T4253] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.906644][ T4249] loop1: detected capacity change from 0 to 40427 [ 59.969043][ T4249] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 59.971525][ T4268] loop4: detected capacity change from 0 to 512 [ 60.002814][ T4249] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 60.004857][ T4253] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #2: comm syz.3.4: corrupted inode contents [ 60.032666][ T4253] EXT4-fs error (device loop3): ext4_dirty_inode:6010: inode #2: comm syz.3.4: mark_inode_dirty error [ 60.047072][ T4253] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #2: comm syz.3.4: corrupted inode contents [ 60.061512][ T4253] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #2: comm syz.3.4: mark_inode_dirty error [ 60.082686][ T4268] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 60.097376][ T4249] F2FS-fs (loop1): Found nat_bits in checkpoint [ 60.112817][ T4260] EXT4-fs (loop0): Test dummy encryption mode enabled [ 60.125072][ T4268] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 60.143449][ T4260] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 60.173105][ T4260] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 60.185475][ T4268] EXT4-fs (loop4): 1 truncate cleaned up [ 60.206279][ T4268] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,resuid=0x0000000000000000,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 60.253222][ T4249] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 60.260635][ T4249] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 60.440017][ T4249] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 60.449078][ T4249] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 60.466552][ T4260] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 60.519850][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 60.530454][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 60.558704][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 60.569181][ T4286] loop3: detected capacity change from 0 to 16 [ 60.576841][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 60.595419][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 60.663628][ T4180] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 60.690941][ T4286] erofs: (device loop3): mounted with root inode @ nid 36. [ 60.875123][ T4294] loop2: detected capacity change from 0 to 512 [ 62.865582][ T4300] device veth1_macvtap left promiscuous mode [ 62.908585][ T4300] device macsec0 entered promiscuous mode [ 62.950943][ T4303] device veth1_macvtap entered promiscuous mode [ 62.975321][ T4303] device macsec0 left promiscuous mode [ 62.997700][ T4305] loop3: detected capacity change from 0 to 2048 [ 63.059333][ T154] Bluetooth: hci4: Frame reassembly failed (-84) [ 63.115085][ T4305] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 63.182321][ T4305] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,mblk_io_submit,minixdf,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none. [ 63.234800][ T4305] overlayfs: fs on './file0/../file0' does not support file handles, falling back to index=off,nfs_export=off. [ 63.409181][ T4319] loop1: detected capacity change from 0 to 256 [ 63.502290][ T4319] exfat: Deprecated parameter 'utf8' [ 63.507841][ T4319] exfat: Deprecated parameter 'namecase' [ 63.513689][ T4319] exfat: Deprecated parameter 'utf8' [ 63.620390][ T4319] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 64.611254][ T4319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15'. [ 64.659358][ C0] sched: RT throttling activated [ 64.683312][ T1235] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.881936][ T1235] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.033849][ T1235] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.152007][ T1235] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.360674][ T7] Bluetooth: hci4: command 0x1003 tx timeout [ 65.367028][ T4168] Bluetooth: hci4: sending frame failed (-49) [ 66.815580][ T4340] chnl_net:caif_netlink_parms(): no params data found [ 67.227947][ T4340] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.289552][ T4340] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.298305][ T4340] device bridge_slave_0 entered promiscuous mode [ 67.400196][ T4210] Bluetooth: hci4: command 0x1001 tx timeout [ 67.406291][ T4168] Bluetooth: hci4: sending frame failed (-49) [ 67.447852][ T4340] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.464210][ T4340] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.512104][ T4340] device bridge_slave_1 entered promiscuous mode [ 67.956738][ T4340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.178762][ T4210] Bluetooth: hci5: command 0x0409 tx timeout [ 68.229445][ T4340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.333642][ T4340] team0: Port device team_slave_0 added [ 68.392994][ T4340] team0: Port device team_slave_1 added [ 68.408720][ T4411] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.47'. [ 68.476455][ T4411] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.47'. [ 68.495348][ T4340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.504297][ T4340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.558038][ T4340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.585105][ T4409] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.47'. [ 68.613132][ T4340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.634100][ T4340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.716959][ T4422] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 68.738169][ T4340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.948448][ T4340] device hsr_slave_0 entered promiscuous mode [ 68.976747][ T4340] device hsr_slave_1 entered promiscuous mode [ 69.005548][ T4340] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.021797][ T4340] Cannot create hsr debugfs directory [ 69.081651][ T4429] loop0: detected capacity change from 0 to 256 [ 69.269937][ T1235] device hsr_slave_0 left promiscuous mode [ 69.283892][ T1235] device hsr_slave_1 left promiscuous mode [ 69.344981][ T1235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.359720][ T1235] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.375939][ T1235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.389978][ T1235] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.407059][ T1235] device bridge_slave_1 left promiscuous mode [ 69.429782][ T1235] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.470096][ T4210] Bluetooth: hci4: command 0x1009 tx timeout [ 69.477302][ T1235] device bridge_slave_0 left promiscuous mode [ 69.495333][ T1235] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.555719][ T1235] device veth1_macvtap left promiscuous mode [ 69.570730][ T1235] device veth0_macvtap left promiscuous mode [ 69.586742][ T1235] device veth1_vlan left promiscuous mode [ 69.604959][ T1235] device veth0_vlan left promiscuous mode [ 70.869943][ T4210] Bluetooth: hci5: command 0x041b tx timeout [ 71.218713][ T1235] team0 (unregistering): Port device team_slave_1 removed [ 71.233285][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.239930][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.431638][ T26] audit: type=1326 audit(1738003498.807:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.1.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9beb6d29 code=0x7ffc0000 [ 71.586743][ T1235] team0 (unregistering): Port device team_slave_0 removed [ 71.798123][ T26] audit: type=1326 audit(1738003498.817:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.1.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9beb6d29 code=0x7ffc0000 [ 71.892082][ T26] audit: type=1326 audit(1738003498.817:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.1.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fae9beb6d29 code=0x7ffc0000 [ 71.999880][ T1235] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.063402][ T1235] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.089720][ T26] audit: type=1326 audit(1738003498.817:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.1.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9beb6d29 code=0x7ffc0000 [ 72.219257][ T26] audit: type=1326 audit(1738003498.827:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.1.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9beb6d29 code=0x7ffc0000 [ 72.299402][ T26] audit: type=1326 audit(1738003498.827:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.1.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fae9beb6d29 code=0x7ffc0000 [ 72.365345][ T26] audit: type=1326 audit(1738003498.837:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.1.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9beb6d29 code=0x7ffc0000 [ 72.438913][ T1235] bond0 (unregistering): Released all slaves [ 72.457955][ T26] audit: type=1326 audit(1738003498.837:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.1.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9beb6d29 code=0x7ffc0000 [ 73.254219][ T4210] Bluetooth: hci5: command 0x040f tx timeout [ 73.376570][ T4466] netlink: 36 bytes leftover after parsing attributes in process `syz.0.57'. [ 73.412815][ T4479] loop2: detected capacity change from 0 to 128 [ 75.063883][ T4340] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 75.152432][ T4340] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 75.259482][ T4340] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 75.297948][ T4340] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 75.390132][ T4211] Bluetooth: hci5: command 0x0419 tx timeout [ 75.399448][ T4493] loop2: detected capacity change from 0 to 256 [ 75.625742][ T4340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.657542][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.683434][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.703879][ T4499] netlink: 1251 bytes leftover after parsing attributes in process `syz.0.65'. [ 75.726738][ T4340] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.754488][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.772791][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.798168][ T3088] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.805322][ T3088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.878474][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.899190][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.923741][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.043375][ T3088] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.050524][ T3088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.134699][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.810078][ T1346] cfg80211: failed to load regulatory.db [ 76.817297][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.867456][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.961761][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.013342][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.153385][ T26] audit: type=1326 audit(1738003504.607:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4513 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2828573d29 code=0x7ffc0000 [ 77.477583][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.706546][ T26] audit: type=1326 audit(1738003504.607:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4513 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2828573d29 code=0x7ffc0000 [ 77.735325][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.908779][ T4340] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 77.929551][ T26] audit: type=1326 audit(1738003504.607:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4513 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f2828573d29 code=0x7ffc0000 [ 77.975813][ T4340] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.102462][ T26] audit: type=1326 audit(1738003504.607:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4513 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2828573d29 code=0x7ffc0000 [ 78.131205][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.158008][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.483009][ T26] audit: type=1326 audit(1738003504.607:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4513 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2828573d29 code=0x7ffc0000 [ 78.581452][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.848674][ T4528] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.73'. [ 78.899048][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.970197][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.016606][ T26] audit: type=1326 audit(1738003504.617:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4513 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f2828573d29 code=0x7ffc0000 [ 79.167158][ T26] audit: type=1326 audit(1738003504.626:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4513 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2828573d29 code=0x7ffc0000 [ 79.311252][ T4541] netlink: 36 bytes leftover after parsing attributes in process `syz.3.74'. [ 79.518991][ T4542] loop2: detected capacity change from 0 to 256 [ 79.839665][ T26] audit: type=1326 audit(1738003504.626:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4513 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2828573d29 code=0x7ffc0000 [ 80.205781][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.278599][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.320011][ T26] audit: type=1326 audit(1738003507.716:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4545 comm="syz.3.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0e232d29 code=0x7ffc0000 [ 80.611194][ T4340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.959629][ T26] audit: type=1326 audit(1738003507.716:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4545 comm="syz.3.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0e232d29 code=0x7ffc0000 [ 81.171861][ T4566] netlink: 'syz.1.83': attribute type 29 has an invalid length. [ 81.264846][ T4566] netlink: 'syz.1.83': attribute type 29 has an invalid length. [ 81.326546][ T4566] netlink: 'syz.1.83': attribute type 29 has an invalid length. [ 81.430504][ T4575] netlink: 'syz.1.83': attribute type 29 has an invalid length. [ 81.502126][ T4566] netlink: 'syz.1.83': attribute type 29 has an invalid length. [ 81.655919][ T4571] netlink: 'syz.1.83': attribute type 29 has an invalid length. [ 81.688104][ T4583] netlink: 'syz.1.83': attribute type 29 has an invalid length. [ 82.501692][ T4591] loop0: detected capacity change from 0 to 512 [ 82.939678][ T4591] EXT4-fs (loop0): journaled quota format not specified [ 83.115690][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.130378][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.351965][ T4340] device veth0_vlan entered promiscuous mode [ 83.421017][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.490279][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.535563][ T4340] device veth1_vlan entered promiscuous mode [ 83.588188][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.569403][ T4612] syz.3.89 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 85.055122][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.069770][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.115251][ T4610] netlink: 36 bytes leftover after parsing attributes in process `syz.0.88'. [ 85.305333][ T4619] Zero length message leads to an empty skb [ 85.337061][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.416915][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 85.416975][ T26] audit: type=1326 audit(1738003512.874:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4615 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2828573d29 code=0x7ffc0000 [ 85.663214][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 85.672785][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 85.689428][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 85.698493][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 85.707476][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 85.716465][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 85.725447][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 85.734458][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 85.743439][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 85.752424][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 85.872115][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.935530][ T4340] device veth0_macvtap entered promiscuous mode [ 86.049772][ T26] audit: type=1326 audit(1738003512.874:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4615 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2828573d29 code=0x7ffc0000 [ 86.098427][ T26] audit: type=1326 audit(1738003512.874:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4615 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f2828573d29 code=0x7ffc0000 [ 86.125432][ T4630] loop2: detected capacity change from 0 to 512 [ 86.232106][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.292283][ T26] audit: type=1326 audit(1738003512.874:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4615 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2828573d29 code=0x7ffc0000 [ 86.372954][ T26] audit: type=1326 audit(1738003512.874:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4615 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2828573d29 code=0x7ffc0000 [ 86.428454][ T26] audit: type=1326 audit(1738003512.874:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4615 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f2828573d29 code=0x7ffc0000 [ 86.452991][ T26] audit: type=1326 audit(1738003512.885:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4615 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2828573d29 code=0x7ffc0000 [ 86.455249][ T4340] device veth1_macvtap entered promiscuous mode [ 86.513305][ T4630] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 86.519855][ T26] audit: type=1326 audit(1738003512.885:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4615 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2828573d29 code=0x7ffc0000 [ 86.531391][ T4630] EXT4-fs (loop2): Unrecognized mount option "seclabel" or missing value [ 86.612606][ T4632] netlink: 'syz.3.92': attribute type 1 has an invalid length. [ 86.768207][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.871443][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.889383][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.947991][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.964011][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.993750][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.004149][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.015193][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.047795][ T4340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.091371][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.230207][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.702313][ T4662] loop0: detected capacity change from 0 to 512 [ 89.070842][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.299603][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.671078][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.798669][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.809158][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.823349][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.827986][ T4674] loop1: detected capacity change from 0 to 512 [ 90.833200][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.833217][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.834554][ T4340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.872592][ T4340] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.881801][ T4340] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.891313][ T4340] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.901379][ T4340] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.034631][ T4662] EXT4-fs (loop0): journaled quota format not specified [ 91.614920][ T26] audit: type=1326 audit(1738003519.075:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4681 comm="syz.3.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0e232d29 code=0x7ffc0000 [ 91.681672][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.938958][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.022101][ T26] audit: type=1326 audit(1738003519.075:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4681 comm="syz.3.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0e232d29 code=0x7ffc0000 [ 92.039644][ T4674] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 92.054213][ T4674] EXT4-fs (loop1): Unrecognized mount option "seclabel" or missing value [ 92.064119][ T26] audit: type=1326 audit(1738003519.075:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4681 comm="syz.3.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f7c0e232d29 code=0x7ffc0000 [ 92.085017][ T4689] loop3: detected capacity change from 0 to 512 [ 92.193794][ T26] audit: type=1326 audit(1738003519.075:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4681 comm="syz.3.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0e232d29 code=0x7ffc0000 [ 92.273006][ T4355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.295944][ T4689] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 92.329600][ T4355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.339726][ T4689] EXT4-fs (loop3): Unrecognized mount option "seclabel" or missing value [ 92.385684][ T4403] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.395240][ T4403] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.402664][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.416580][ T26] audit: type=1326 audit(1738003519.085:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4681 comm="syz.3.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0e232d29 code=0x7ffc0000 [ 92.417303][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.458751][ T26] audit: type=1326 audit(1738003519.085:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4681 comm="syz.3.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f7c0e232d29 code=0x7ffc0000 [ 92.558427][ T4697] loop2: detected capacity change from 0 to 256 [ 92.584562][ T26] audit: type=1326 audit(1738003519.088:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4681 comm="syz.3.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0e232d29 code=0x7ffc0000 [ 92.772582][ T26] audit: type=1326 audit(1738003519.088:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4681 comm="syz.3.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0e232d29 code=0x7ffc0000 [ 97.059731][ T4746] loop3: detected capacity change from 0 to 512 [ 97.762987][ T4746] EXT4-fs (loop3): journaled quota format not specified [ 98.022842][ T26] audit: type=1326 audit(1738003525.488:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4739 comm="syz.1.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9beb6d29 code=0x7ffc0000 [ 98.078991][ T26] audit: type=1326 audit(1738003525.488:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4739 comm="syz.1.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9beb6d29 code=0x7ffc0000 [ 98.386988][ T26] audit: type=1326 audit(1738003525.488:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4739 comm="syz.1.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fae9beb6d29 code=0x7ffc0000 [ 99.135938][ T4760] loop3: detected capacity change from 0 to 512 [ 99.145832][ T4759] netlink: 'syz.1.119': attribute type 1 has an invalid length. [ 99.340580][ T4759] device bond1 entered promiscuous mode [ 99.346121][ T26] audit: type=1326 audit(1738003525.488:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4739 comm="syz.1.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9beb6d29 code=0x7ffc0000 [ 99.349998][ T4760] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 99.602998][ T26] audit: type=1326 audit(1738003525.488:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4739 comm="syz.1.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9beb6d29 code=0x7ffc0000 [ 99.964601][ T1092] block nbd0: Attempted send on invalid socket [ 99.976283][ T1092] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 99.999437][ T4768] exFAT-fs (nbd0): unable to read boot sector [ 100.042750][ T4759] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.071176][ T4768] exFAT-fs (nbd0): failed to read boot sector [ 100.077956][ T4768] exFAT-fs (nbd0): failed to recognize exfat type [ 100.117395][ T4764] syz.1.119 uses obsolete (PF_INET,SOCK_PACKET) [ 100.160189][ T4760] EXT4-fs (loop3): Unrecognized mount option "seclabel" or missing value [ 100.188349][ T26] audit: type=1326 audit(1738003525.488:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4739 comm="syz.1.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fae9beb6d29 code=0x7ffc0000 [ 100.288535][ T4759] netlink: 48 bytes leftover after parsing attributes in process `syz.1.119'. [ 100.379608][ T4759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.119'. [ 101.714227][ T26] audit: type=1326 audit(1738003525.498:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4739 comm="syz.1.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9beb6d29 code=0x7ffc0000 [ 101.892004][ T4781] bridge0: port 3(syz_tun) entered blocking state [ 101.973132][ T26] audit: type=1326 audit(1738003525.498:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4739 comm="syz.1.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9beb6d29 code=0x7ffc0000 [ 101.987713][ T4781] bridge0: port 3(syz_tun) entered disabled state [ 102.062470][ T4786] loop1: detected capacity change from 0 to 512 [ 102.183349][ T4781] device syz_tun entered promiscuous mode [ 102.208388][ T4781] bridge0: port 3(syz_tun) entered blocking state [ 102.215361][ T4781] bridge0: port 3(syz_tun) entered forwarding state [ 102.402890][ T4786] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 102.425090][ T4786] EXT4-fs (loop1): Unrecognized mount option "seclabel" or missing value [ 102.991864][ T4783] netlink: 4 bytes leftover after parsing attributes in process `syz.3.124'. [ 103.067730][ T4783] device syz_tun left promiscuous mode [ 103.150109][ T4783] bridge0: port 3(syz_tun) entered disabled state [ 103.248967][ T4783] device bridge_slave_1 left promiscuous mode [ 103.578418][ T4783] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.667506][ T4783] device bridge_slave_0 left promiscuous mode [ 103.697802][ T4783] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.779788][ T4814] loop5: detected capacity change from 0 to 512 [ 103.871623][ T4814] EXT4-fs (loop5): orphan cleanup on readonly fs [ 103.889462][ T4814] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.131: bg 0: block 248: padding at end of block bitmap is not set [ 103.908417][ T4814] Quota error (device loop5): write_blk: dquota write failed [ 103.916627][ T4814] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 103.926640][ T4814] EXT4-fs error (device loop5): ext4_acquire_dquot:6197: comm syz.5.131: Failed to acquire dquot type 1 [ 103.953457][ T4814] EXT4-fs (loop5): 1 truncate cleaned up [ 103.960203][ T4814] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 104.227255][ T4826] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 104.433042][ T26] audit: type=1326 audit(1738003531.898:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4804 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2828573d29 code=0x7ffc0000 [ 104.540881][ T26] audit: type=1326 audit(1738003531.928:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4804 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2828573d29 code=0x7ffc0000 [ 104.657070][ T26] audit: type=1326 audit(1738003531.958:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4804 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f2828573d29 code=0x7ffc0000 [ 104.703719][ T26] audit: type=1326 audit(1738003531.975:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4804 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2828573d29 code=0x7ffc0000 [ 104.749505][ T26] audit: type=1326 audit(1738003531.975:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4804 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2828573d29 code=0x7ffc0000 [ 105.183897][ T4842] loop3: detected capacity change from 0 to 256 [ 105.248157][ T4847] loop0: detected capacity change from 0 to 512 [ 105.373622][ T4847] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 105.400793][ T4847] EXT4-fs (loop0): Unrecognized mount option "seclabel" or missing value [ 106.599874][ T4861] loop5: detected capacity change from 0 to 512 [ 106.657579][ T4861] EXT4-fs (loop5): journaled quota format not specified [ 110.481651][ T4885] loop0: detected capacity change from 0 to 512 [ 112.051193][ T4885] EXT4-fs (loop0): orphan cleanup on readonly fs [ 112.061029][ T4885] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.144: bg 0: block 248: padding at end of block bitmap is not set [ 112.076736][ T4885] Quota error (device loop0): write_blk: dquota write failed [ 112.084610][ T4885] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 112.095230][ T4885] EXT4-fs error (device loop0): ext4_acquire_dquot:6197: comm syz.0.144: Failed to acquire dquot type 1 [ 112.109199][ T4885] EXT4-fs (loop0): 1 truncate cleaned up [ 112.123046][ T4885] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 113.048867][ T4904] loop0: detected capacity change from 0 to 512 [ 113.198075][ T4904] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 113.239674][ T4904] EXT4-fs (loop0): Unrecognized mount option "seclabel" or missing value [ 113.500826][ T4910] loop1: detected capacity change from 0 to 512 [ 113.613152][ T4910] EXT4-fs (loop1): journaled quota format not specified [ 117.482904][ T4949] loop3: detected capacity change from 0 to 512 [ 119.957554][ T4949] EXT4-fs (loop3): orphan cleanup on readonly fs [ 119.966078][ T4949] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.159: bg 0: block 248: padding at end of block bitmap is not set [ 119.986908][ T4949] Quota error (device loop3): write_blk: dquota write failed [ 119.994437][ T4949] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 120.004428][ T4949] EXT4-fs error (device loop3): ext4_acquire_dquot:6197: comm syz.3.159: Failed to acquire dquot type 1 [ 120.017167][ T4949] EXT4-fs (loop3): 1 truncate cleaned up [ 120.035525][ T4949] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 120.360515][ T4960] loop0: detected capacity change from 0 to 512 [ 120.964209][ T4960] EXT4-fs (loop0): journaled quota format not specified [ 121.285716][ T4970] loop3: detected capacity change from 0 to 512 [ 121.340951][ T4974] loop5: detected capacity change from 0 to 256 [ 121.431789][ T4970] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 121.450994][ T4970] EXT4-fs (loop3): Unrecognized mount option "seclabel" or missing value [ 124.046632][ T5014] loop0: detected capacity change from 0 to 512 [ 126.695663][ T5014] EXT4-fs (loop0): orphan cleanup on readonly fs [ 126.743781][ T5014] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.172: bg 0: block 248: padding at end of block bitmap is not set [ 126.760148][ T5014] Quota error (device loop0): write_blk: dquota write failed [ 126.767807][ T5014] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 126.778589][ T5014] EXT4-fs error (device loop0): ext4_acquire_dquot:6197: comm syz.0.172: Failed to acquire dquot type 1 [ 126.803172][ T5014] EXT4-fs (loop0): 1 truncate cleaned up [ 126.815115][ T5014] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 127.576528][ T5038] loop0: detected capacity change from 0 to 512 [ 128.232864][ T5038] EXT4-fs (loop0): journaled quota format not specified [ 129.702036][ T5056] loop0: detected capacity change from 0 to 512 [ 129.830540][ T26] audit: type=1326 audit(1738003557.265:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5019 comm="syz.3.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0e232d29 code=0x7ffc0000 [ 130.103348][ T5056] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 130.353998][ T5056] EXT4-fs (loop0): Unrecognized mount option "seclabel" or missing value [ 130.471684][ T26] audit: type=1326 audit(1738003557.275:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5019 comm="syz.3.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f7c0e232d29 code=0x7ffc0000 [ 130.579562][ T26] audit: type=1326 audit(1738003558.035:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5019 comm="syz.3.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0e232d29 code=0x7ffc0000 [ 130.780352][ T5076] loop2: detected capacity change from 0 to 512 [ 130.802812][ T26] audit: type=1326 audit(1738003558.035:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5019 comm="syz.3.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0e232d29 code=0x7ffc0000 [ 132.524604][ T5076] EXT4-fs (loop2): orphan cleanup on readonly fs [ 132.532776][ T5076] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.186: bg 0: block 248: padding at end of block bitmap is not set [ 132.619968][ T5095] process 'syz.0.187' launched './file1' with NULL argv: empty string added [ 132.828500][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.874406][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.052144][ T5076] Quota error (device loop2): write_blk: dquota write failed [ 133.059710][ T5076] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 133.069747][ T5076] EXT4-fs error (device loop2): ext4_acquire_dquot:6197: comm syz.2.186: Failed to acquire dquot type 1 [ 133.119999][ T5076] EXT4-fs (loop2): 1 truncate cleaned up [ 133.141899][ T5076] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 133.159627][ T5098] usb usb8: usbfs: process 5098 (syz.1.189) did not claim interface 0 before use [ 133.187287][ T4212] hid-generic 1AA0:0002:0386.0001: item fetching failed at offset 0/2 [ 133.534319][ T4212] hid-generic: probe of 1AA0:0002:0386.0001 failed with error -22 [ 133.892770][ T4171] ================================================================== [ 133.901172][ T4171] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x11d6/0x3f50 [ 133.909015][ T4171] Read of size 1 at addr ffff888074f6a40a by task kworker/u5:2/4171 [ 133.917001][ T4171] [ 133.919365][ T4171] CPU: 1 PID: 4171 Comm: kworker/u5:2 Not tainted 5.15.177-syzkaller #0 [ 133.927697][ T4171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 133.937756][ T4171] Workqueue: hci0 hci_rx_work [ 133.942458][ T4171] Call Trace: [ 133.945737][ T4171] [ 133.948673][ T4171] dump_stack_lvl+0x1e3/0x2d0 [ 133.953362][ T4171] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 133.959001][ T4171] ? _printk+0xd1/0x120 [ 133.963168][ T4171] ? __wake_up_klogd+0xcc/0x100 [ 133.968025][ T4171] ? panic+0x860/0x860 [ 133.972104][ T4171] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 133.977668][ T4171] print_address_description+0x63/0x3b0 [ 133.983311][ T4171] ? hci_le_meta_evt+0x11d6/0x3f50 [ 133.988434][ T4171] kasan_report+0x16b/0x1c0 [ 133.992947][ T4171] ? hci_le_meta_evt+0x11d6/0x3f50 [ 133.998410][ T4171] hci_le_meta_evt+0x11d6/0x3f50 [ 134.004577][ T4171] ? __lock_acquire+0x1ff0/0x1ff0 [ 134.009713][ T4171] ? hci_remote_host_features_evt+0x280/0x280 [ 134.015872][ T4171] ? __mutex_unlock_slowpath+0x218/0x750 [ 134.021507][ T4171] ? hci_event_packet+0x3b4/0x1550 [ 134.026618][ T4171] ? mutex_unlock+0x10/0x10 [ 134.031116][ T4171] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 134.037090][ T4171] ? print_irqtrace_events+0x210/0x210 [ 134.042540][ T4171] hci_event_packet+0xc41/0x1550 [ 134.047486][ T4171] ? rcu_lock_release+0x20/0x20 [ 134.052332][ T4171] ? hci_send_to_monitor+0x99/0x4d0 [ 134.057524][ T4171] hci_rx_work+0x237/0xa10 [ 134.061938][ T4171] process_one_work+0x8a1/0x10c0 [ 134.067225][ T4171] ? worker_detach_from_pool+0x260/0x260 [ 134.072846][ T4171] ? _raw_spin_lock_irqsave+0x120/0x120 [ 134.078379][ T4171] ? kthread_data+0x4e/0xc0 [ 134.082867][ T4171] ? wq_worker_running+0x97/0x170 [ 134.087878][ T4171] worker_thread+0xaca/0x1280 [ 134.092567][ T4171] kthread+0x3f6/0x4f0 [ 134.096619][ T4171] ? rcu_lock_release+0x20/0x20 [ 134.101478][ T4171] ? kthread_blkcg+0xd0/0xd0 [ 134.106149][ T4171] ret_from_fork+0x1f/0x30 [ 134.110575][ T4171] [ 134.113584][ T4171] [ 134.115888][ T4171] Allocated by task 5117: [ 134.120193][ T4171] ____kasan_kmalloc+0xba/0xf0 [ 134.124944][ T4171] __kmalloc_node_track_caller+0x195/0x390 [ 134.130754][ T4171] __alloc_skb+0x12c/0x590 [ 134.135171][ T4171] vhci_write+0xbc/0x430 [ 134.139407][ T4171] vfs_write+0xacd/0xe50 [ 134.143642][ T4171] ksys_write+0x1a2/0x2c0 [ 134.147959][ T4171] do_syscall_64+0x3b/0xb0 [ 134.152360][ T4171] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.158236][ T4171] [ 134.160542][ T4171] The buggy address belongs to the object at ffff888074f6a000 [ 134.160542][ T4171] which belongs to the cache kmalloc-1k of size 1024 [ 134.174575][ T4171] The buggy address is located 10 bytes to the right of [ 134.174575][ T4171] 1024-byte region [ffff888074f6a000, ffff888074f6a400) [ 134.188354][ T4171] The buggy address belongs to the page: [ 134.193971][ T4171] page:ffffea0001d3da00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x74f68 [ 134.204108][ T4171] head:ffffea0001d3da00 order:3 compound_mapcount:0 compound_pincount:0 [ 134.212414][ T4171] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 134.220390][ T4171] raw: 00fff00000010200 ffffea0001f77000 0000000600000006 ffff888017441dc0 [ 134.228952][ T4171] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 134.237512][ T4171] page dumped because: kasan: bad access detected [ 134.243908][ T4171] page_owner tracks the page as allocated [ 134.249602][ T4171] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4149, ts 42710248905, free_ts 42668806087 [ 134.268693][ T4171] get_page_from_freelist+0x3b78/0x3d40 [ 134.274347][ T4171] __alloc_pages+0x272/0x700 [ 134.278929][ T4171] new_slab+0xbb/0x4b0 [ 134.282982][ T4171] ___slab_alloc+0x6f6/0xe10 [ 134.287553][ T4171] __kmalloc_node_track_caller+0x1f6/0x390 [ 134.293340][ T4171] __alloc_skb+0x12c/0x590 [ 134.297743][ T4171] sk_stream_alloc_skb+0x1fc/0xac0 [ 134.302845][ T4171] tcp_sendmsg_locked+0xd34/0x3a90 [ 134.307946][ T4171] tcp_sendmsg+0x2c/0x40 [ 134.312171][ T4171] sock_write_iter+0x39b/0x530 [ 134.316919][ T4171] vfs_write+0xacd/0xe50 [ 134.321143][ T4171] ksys_write+0x1a2/0x2c0 [ 134.325454][ T4171] do_syscall_64+0x3b/0xb0 [ 134.329854][ T4171] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.335735][ T4171] page last free stack trace: [ 134.340385][ T4171] free_unref_page_prepare+0xc34/0xcf0 [ 134.345830][ T4171] free_unref_page+0x95/0x2d0 [ 134.350486][ T4171] skb_release_data+0x411/0x8a0 [ 134.355321][ T4171] __kfree_skb+0x4c/0x60 [ 134.359545][ T4171] tcp_recvmsg_locked+0x1629/0x29b0 [ 134.364726][ T4171] tcp_recvmsg+0x24e/0x7f0 [ 134.369125][ T4171] inet_recvmsg+0x157/0x280 [ 134.373610][ T4171] sock_read_iter+0x353/0x480 [ 134.378268][ T4171] vfs_read+0xa93/0xe10 [ 134.382403][ T4171] ksys_read+0x1a2/0x2c0 [ 134.386641][ T4171] do_syscall_64+0x3b/0xb0 [ 134.391040][ T4171] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.396929][ T4171] [ 134.399241][ T4171] Memory state around the buggy address: [ 134.404851][ T4171] ffff888074f6a300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 134.412898][ T4171] ffff888074f6a380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 134.420942][ T4171] >ffff888074f6a400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 134.428983][ T4171] ^ [ 134.433290][ T4171] ffff888074f6a480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 134.441332][ T4171] ffff888074f6a500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 134.449372][ T4171] ================================================================== [ 134.457410][ T4171] Disabling lock debugging due to kernel taint [ 134.494442][ T4171] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 134.501660][ T4171] CPU: 0 PID: 4171 Comm: kworker/u5:2 Tainted: G B 5.15.177-syzkaller #0 [ 134.511376][ T4171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 134.521430][ T4171] Workqueue: hci0 hci_rx_work [ 134.526112][ T4171] Call Trace: [ 134.529385][ T4171] [ 134.532325][ T4171] dump_stack_lvl+0x1e3/0x2d0 [ 134.537004][ T4171] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 134.542633][ T4171] ? panic+0x860/0x860 [ 134.546708][ T4171] ? rcu_is_watching+0x11/0xa0 [ 134.551470][ T4171] ? preempt_schedule_common+0xa6/0xd0 [ 134.556926][ T4171] panic+0x318/0x860 [ 134.560818][ T4171] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 134.566972][ T4171] ? check_panic_on_warn+0x1d/0xa0 [ 134.572083][ T4171] ? fb_is_primary_device+0xd0/0xd0 [ 134.577285][ T4171] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 134.583268][ T4171] ? _raw_spin_unlock+0x40/0x40 [ 134.588126][ T4171] check_panic_on_warn+0x7e/0xa0 [ 134.593069][ T4171] ? hci_le_meta_evt+0x11d6/0x3f50 [ 134.598180][ T4171] end_report+0x6d/0xf0 [ 134.602333][ T4171] kasan_report+0x18e/0x1c0 [ 134.606837][ T4171] ? hci_le_meta_evt+0x11d6/0x3f50 [ 134.611959][ T4171] hci_le_meta_evt+0x11d6/0x3f50 [ 134.616918][ T4171] ? __lock_acquire+0x1ff0/0x1ff0 [ 134.621947][ T4171] ? hci_remote_host_features_evt+0x280/0x280 [ 134.628014][ T4171] ? __mutex_unlock_slowpath+0x218/0x750 [ 134.633636][ T4171] ? hci_event_packet+0x3b4/0x1550 [ 134.638739][ T4171] ? mutex_unlock+0x10/0x10 [ 134.643223][ T4171] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 134.649185][ T4171] ? print_irqtrace_events+0x210/0x210 [ 134.654626][ T4171] hci_event_packet+0xc41/0x1550 [ 134.659552][ T4171] ? rcu_lock_release+0x20/0x20 [ 134.664386][ T4171] ? hci_send_to_monitor+0x99/0x4d0 [ 134.669569][ T4171] hci_rx_work+0x237/0xa10 [ 134.673972][ T4171] process_one_work+0x8a1/0x10c0 [ 134.678893][ T4171] ? worker_detach_from_pool+0x260/0x260 [ 134.684504][ T4171] ? _raw_spin_lock_irqsave+0x120/0x120 [ 134.690035][ T4171] ? kthread_data+0x4e/0xc0 [ 134.694517][ T4171] ? wq_worker_running+0x97/0x170 [ 134.699520][ T4171] worker_thread+0xaca/0x1280 [ 134.704184][ T4171] kthread+0x3f6/0x4f0 [ 134.708230][ T4171] ? rcu_lock_release+0x20/0x20 [ 134.713058][ T4171] ? kthread_blkcg+0xd0/0xd0 [ 134.717627][ T4171] ret_from_fork+0x1f/0x30 [ 134.722030][ T4171] [ 134.725226][ T4171] Kernel Offset: disabled [ 134.729539][ T4171] Rebooting in 86400 seconds..