last executing test programs: 6m10.434490172s ago: executing program 3 (id=4): prlimit64(0x0, 0xe, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 6m2.708875515s ago: executing program 3 (id=10): socket$nl_generic(0x10, 0x3, 0x10) r0 = fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) chdir(0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = fsmount(r0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x10}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0x110}, 0x1, 0x0, 0x0, 0x20004000}, 0x2000c081) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe000000000000000800040001000000", 0x24) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000240)={'gretap0\x00', &(0x7f0000000300)={'gre0\x00', 0x0, 0x40, 0x7800, 0x6, 0x7, {{0x24, 0x4, 0x2, 0x38, 0x90, 0x66, 0x0, 0xb6, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x18, 0x13, 0x0, 0x8, [0xa, 0x1b1, 0x8, 0x100, 0xbc]}, @end, @generic={0x44, 0xc, "20c58b381343a675633f"}, @generic={0x44, 0x2}, @ssrr={0x89, 0x7, 0xcf, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x48, 0x3, 0x2, [{@local, 0x6f}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}, {@multicast1, 0x5}, {@multicast1}]}, @timestamp_prespec={0x44, 0x1c, 0x75, 0x3, 0x8, [{@loopback, 0x7fff}, {@multicast2, 0xfff}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x1}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x6, 0x0, 0x12, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20, 0x8000, 0x7f, 0xfe}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x7c, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 5m47.027776804s ago: executing program 32 (id=10): socket$nl_generic(0x10, 0x3, 0x10) r0 = fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) chdir(0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = fsmount(r0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x10}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0x110}, 0x1, 0x0, 0x0, 0x20004000}, 0x2000c081) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe000000000000000800040001000000", 0x24) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000240)={'gretap0\x00', &(0x7f0000000300)={'gre0\x00', 0x0, 0x40, 0x7800, 0x6, 0x7, {{0x24, 0x4, 0x2, 0x38, 0x90, 0x66, 0x0, 0xb6, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x18, 0x13, 0x0, 0x8, [0xa, 0x1b1, 0x8, 0x100, 0xbc]}, @end, @generic={0x44, 0xc, "20c58b381343a675633f"}, @generic={0x44, 0x2}, @ssrr={0x89, 0x7, 0xcf, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x48, 0x3, 0x2, [{@local, 0x6f}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}, {@multicast1, 0x5}, {@multicast1}]}, @timestamp_prespec={0x44, 0x1c, 0x75, 0x3, 0x8, [{@loopback, 0x7fff}, {@multicast2, 0xfff}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x1}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x6, 0x0, 0x12, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20, 0x8000, 0x7f, 0xfe}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x7c, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 4m10.121850909s ago: executing program 5 (id=188): setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00'}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000000008010200000000000000000200ffff0600024022eb000005000300ffff00000900010073797a3000000000260004"], 0x58}, 0x1, 0x0, 0x0, 0x20000015}, 0x20008000) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x2, 0x8, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20008000) 4m1.03308748s ago: executing program 5 (id=211): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000002380)="$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") ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0x7ff, 0x1}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffc}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) lstat(&(0x7f0000000200)='./file1\x00', &(0x7f0000000340)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) fgetxattr(r7, &(0x7f0000000000)=@known='security.selinux\x00', 0x0, 0x0) 3m55.152360709s ago: executing program 5 (id=217): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f0000000140), &(0x7f00000000c0)=0xfffffffffffffef0) 3m50.402385864s ago: executing program 5 (id=224): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7d, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x18c, r5, 0xfe12482fe0801d67, 0x0, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffffb7}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x17bfffc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0xf}, {0xc, 0x90, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0xf}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x7fffffff}, {0xc, 0x90, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x800000000000007}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4000810) fcntl$getownex(r3, 0x10, &(0x7f0000000180)) sendto$inet6(r4, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0xfffffe00, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc3}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) 3m44.777090908s ago: executing program 5 (id=229): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getitimer(0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3m41.466929867s ago: executing program 5 (id=234): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000050000000500000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) sigaltstack(0x0, 0x0) getpgid(0x0) 3m26.350573781s ago: executing program 33 (id=234): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000050000000500000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) sigaltstack(0x0, 0x0) getpgid(0x0) 16.052594782s ago: executing program 4 (id=643): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7d, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x18c, r5, 0xfe12482fe0801d67, 0x0, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffffb7}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x17bfffc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0xf}, {0xc, 0x90, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0xf}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x7fffffff}, {0xc, 0x90, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x800000000000007}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4000810) fcntl$getownex(r3, 0x10, &(0x7f0000000180)) sendto$inet6(r4, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0xfffffe00, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc3}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) 14.1125797s ago: executing program 6 (id=645): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0x0) 14.11205963s ago: executing program 4 (id=646): setrlimit(0x0, &(0x7f0000000000)={0x8000000000000001, 0xffffffffffffffff}) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2710, @hyper}, 0x10) r1 = socket$inet6(0xa, 0x802, 0x0) unlink(&(0x7f0000000540)='./file0\x00') setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x170, 0x130, 0x26010000, 0x170, 0x130, 0x260, 0x220, 0x220, 0x260, 0x220, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x170, 0x0, {0x0, 0x25e}, [@common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0xffffffff]}}, @common=@unspec=@state={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffffff, 0xffffff00], 0x4e24, 0x4e22, 0x4e22, 0x4e22, 0xbe, 0x1, 0x2, 0x4, 0x6}}}, {{@ipv6={@mcast2, @mcast1, [], [], 'bridge_slave_0\x00', 'dummy0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x2, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) syz_clone(0x10eb22b000, 0x0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000004c0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000040)={0xa525, 0xe, 0x62, {0x0, 0x101}, 0x0, 0x8000000}) 13.813144065s ago: executing program 6 (id=648): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0x11, 0x200000000000003, 0x300) recvmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0), 0x60}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x800) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) time(0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0) fcntl$setpipe(r3, 0x407, 0x0) 12.983482057s ago: executing program 1 (id=649): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f00000002c0)='ceph\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)="73bf829d80bb6ade58c32d54e77efd0732ae71a94d5ef4c25a2db3bddf60e15870088fdd4801032b3b2e02cb8fca22de14d501", 0x33, 0xfffffffffffffffc) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x127081) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@private=0xa010102, @in6=@remote, 0x0, 0x57, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x2000000, 0x2}, {0x7, 0x0, 0x4}, 0x1, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x0, 0x33}, 0x2, @in=@broadcast, 0x3507, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) socket$kcm(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESDEC=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) sync() setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) 12.335061807s ago: executing program 6 (id=651): r0 = add_key$keyring(&(0x7f00000028c0), &(0x7f0000002900)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000002940)='asymmetric\x00', &(0x7f0000002980)='#\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000000000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x26) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) socket$packet(0x11, 0x3, 0x300) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 12.12296698s ago: executing program 4 (id=653): r0 = add_key$keyring(&(0x7f00000028c0), &(0x7f0000002900)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000002940)='asymmetric\x00', &(0x7f0000002980)='#\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000000000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) r6 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) socket$packet(0x11, 0x3, 0x300) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 11.224778233s ago: executing program 1 (id=654): connect$inet6(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000680)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6], 0xeeee0000, 0x8340}) ptrace$peekuser(0x3, 0x0, 0x200) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000300)=""/102376, 0x18fe8) bind$alg(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r5, &(0x7f00000001c0), &(0x7f0000000180)=@udp6, 0x2}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 11.141934885s ago: executing program 0 (id=655): fadvise64(0xffffffffffffffff, 0x0, 0x3, 0x3) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) memfd_create(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0}, 0x18) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x91e, 0x12) pipe2(&(0x7f0000000840), 0xc4080) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x14e) 11.052293346s ago: executing program 2 (id=656): r0 = add_key$keyring(&(0x7f00000028c0), &(0x7f0000002900)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000002940)='asymmetric\x00', &(0x7f0000002980)='#\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000000000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r9}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) socket$packet(0x11, 0x3, 0x300) r10 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r10, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 10.262535528s ago: executing program 0 (id=657): epoll_create1(0x80000) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000280), 0x10, 0x4dc, &(0x7f0000000d80)="$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") lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) r4 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x2b0, 0x2b0, 0x2b0, 0x138, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x60000016}) 10.186333569s ago: executing program 1 (id=658): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x18c, r5, 0xfe12482fe0801d67, 0x0, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffffb7}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x17bfffc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0xf}, {0xc, 0x90, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0xf}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x7fffffff}, {0xc, 0x90, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x800000000000007}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4000810) fcntl$getownex(r3, 0x10, &(0x7f0000000180)) sendto$inet6(r4, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0xfffffe00, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc3}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) 8.914100167s ago: executing program 6 (id=659): epoll_create1(0x80000) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000280), 0x10, 0x4dc, &(0x7f0000000d80)="$eJzs3d9rHFsdAPDvTLK3v3JNrvpwveBtsZW0aHeTxrbBh1pB7FPBWt9rTDYhZJMN2U3bhCIpviuIqOCTT74I/gGC9E8QoaDvUkURbfXBB3VlZ2drG3eTlG52LsnnA9M5M2d3v9/TsGfmzBx2Aji2zkXEzYgYiYhLETGe70/z5Va7/k7ndS+eP5pvL0m0Wnf/mkSS7+t+VpKvz0TETkScjIiv34r4VvL/cRtb2ytztVp1I9+uNFfXK42t7cvLq3NL1aXq2szM9LXZ67NXZ6cG0s6JiLjxlT/+8Hs/++qNX33+we/v/fnit9tpjeX1r7ZjkDpNL2X/F12jEbFxGMEKMJKvS33qvzsyxGQAANhX+xz/4xHxmez8fzxGsrNTAAAA4ChpfWks/pVEtAAAAIAjK83mwCZpOZ8LMBZpWi535vB+Mk6ntXqj+bnF+ubaQmeu7ESU0sXlWnUqnys8EaWkvT2dz7Htbl/ZtT0TEe9FxA/GT2Xb5fl6baHoix8AAABwTJzZNf7/x3g2/j9RdF4AAADAgE0UnQAAAABw6Iz/AQAA4Ogz/gcAAIAj7Wu3b7eXVvf51wv3tzZX6vcvL1QbK+XVzfnyfH1jvbxUry9lv9m3ut/n1er19S/E2ubDSrPaaFYaW9v3Vuuba817y689AhsAAAAYovfOPvldEhE7XzyVLW3vFJ0UMBTJPvXZQ0Ke5Rt/GEJCwNCMFJ0AUJjRohMAClMqOgGgcPtdB+g7eefXg88FAAA4HJOf6n//37UBONrSohMAAIbO/X84vkqvzwC8WlwmQFE+tk/929//b7XeKCEAAGDgxrIlScv5vcCxSNNyOeLd7LEApWRxuVadyscHvx0vnWhvT2fvTPadMwwAAAAAAAAAAAAAAAAAAAAAAAAAdLRaSbQAAACAIy0i/VOS/Zp/xOT4hbHd1wfeSf45nq0j4sFP7v7o4VyzuTHd3v+3l/ubP873XyniCgYAAACwW3ec3h3HAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAgvXj+aL67DDPuX74cERM94589ma1ORikiTv89idFX3pdExMgA4u88joj3e8VP2mnFRHSy6BX/VIHx04g4M4D4cJw9afc/N3t9/9I4l617f/9G8+Vt9e//0uj2fyN9+p93Dxjjg6e/qPSN/zjig9He/U83ftIn/vkDxv/mN7a3+9W1fhox2fP4k7wWq9JcXa80trYvL6/OLVWXqmszM9PXZq/PXp2dqiwu16r5vz1jfP/Tv/zPXu0/3Sf+xD7tv3DA9v/76cPnn+gUS73iXzzf+/j7fp/4aX7s+2xebtdPdss7nfKrPvz5bz7cq/0Lfdr/8u/f40DbjnnxgO2/dOc7zw74UgBgCBpb2ytztVp1460Kg/qcNyykUUBQhUMqnPhopKHQKezVayTD66AAAICB+d9Jf9GZAAAAAAAAAAAAAAAAAAAAwPE1jJ8T2x1zp5imAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADs6b8BAAD///JI2KQ=") lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x2b0, 0x2b0, 0x2b0, 0x138, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x60000016}) 8.874266848s ago: executing program 0 (id=660): setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00'}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r4, 0x0, 0x0) connect$inet(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000000008010200000000000000000200ffff0600024022eb000005000300ffff00000900010073797a3000000000260004"], 0x58}, 0x1, 0x0, 0x0, 0x20000015}, 0x20008000) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x2, 0x8, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20008000) 8.781856999s ago: executing program 4 (id=661): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0x11, 0x200000000000003, 0x300) recvmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0), 0x60}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x800) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) time(0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0) fcntl$setpipe(r3, 0x407, 0x0) 8.132651949s ago: executing program 1 (id=662): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x862b01) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) 7.206618563s ago: executing program 0 (id=663): epoll_create1(0x80000) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000280), 0x10, 0x4dc, &(0x7f0000000d80)="$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") lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x2b0, 0x2b0, 0x2b0, 0x138, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x60000016}) 6.790791459s ago: executing program 4 (id=664): mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) 6.608563562s ago: executing program 1 (id=665): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000780)='./bus\x00', 0x20008c0, &(0x7f0000000200)={[{@fat=@allow_utime={'allow_utime', 0x3d, 0xff}}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlateno}, {@fat=@check_strict}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@fat=@dmask={'dmask', 0x3d, 0x8000000000000000}}, {@utf8no}, {@shortname_winnt}, {@shortname_mixed}, {@uni_xlateno}, {@shortname_mixed}, {@uni_xlate}]}, 0x80, 0x364, &(0x7f0000000400)="$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") sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x8, [@struct={0x6, 0x0, 0x0, 0x4, 0x0, 0x6}, @const={0x0, 0x0, 0x0, 0xa, 0x1}, @var={0x6, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x0, 0x5f]}}, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r5 = fsopen(&(0x7f0000000100)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) fchdir(0xffffffffffffffff) removexattr(&(0x7f0000000000)='./file0\x00', 0x0) 6.606791722s ago: executing program 2 (id=666): pipe2$9p(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x3, 0x3, 0x3, 0x1, 0x0, 0x10}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000180), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x242, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) setitimer(0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) r5 = fanotify_init(0x200, 0x101000) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000000)="315027b23d445e", 0x7}], 0x1) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 6.582844662s ago: executing program 4 (id=667): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) 5.569431637s ago: executing program 6 (id=668): connect$inet6(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000680)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6], 0xeeee0000, 0x8340}) ptrace$peekuser(0x3, 0x0, 0x200) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000300)=""/102376, 0x18fe8) bind$alg(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r5, &(0x7f00000001c0), &(0x7f0000000180)=@udp6, 0x2}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 5.083064934s ago: executing program 2 (id=669): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x80}}, 0x0) 4.67120417s ago: executing program 2 (id=670): socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000010400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x48) r1 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) 3.862455302s ago: executing program 0 (id=671): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10005, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[]) 2.69806711s ago: executing program 0 (id=672): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_setup(0x1725, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400002, 0x3a6}, &(0x7f0000000040), 0x0) r1 = gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000b28000)=0x3) pause() fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{}], 0x2c, 0xffffffffffbffff8) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, r1) tkill(r1, 0x13) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, 0x0, 0x0) 2.247958136s ago: executing program 1 (id=673): epoll_create1(0x80000) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000280), 0x10, 0x4dc, &(0x7f0000000d80)="$eJzs3d9rHFsdAPDvTLK3v3JNrvpwveBtsZW0aHeTxrbBh1pB7FPBWt9rTDYhZJMN2U3bhCIpviuIqOCTT74I/gGC9E8QoaDvUkURbfXBB3VlZ2drG3eTlG52LsnnA9M5M2d3v9/TsGfmzBx2Aji2zkXEzYgYiYhLETGe70/z5Va7/k7ndS+eP5pvL0m0Wnf/mkSS7+t+VpKvz0TETkScjIiv34r4VvL/cRtb2ytztVp1I9+uNFfXK42t7cvLq3NL1aXq2szM9LXZ67NXZ6cG0s6JiLjxlT/+8Hs/++qNX33+we/v/fnit9tpjeX1r7ZjkDpNL2X/F12jEbFxGMEKMJKvS33qvzsyxGQAANhX+xz/4xHxmez8fzxGsrNTAAAA4ChpfWks/pVEtAAAAIAjK83mwCZpOZ8LMBZpWi535vB+Mk6ntXqj+bnF+ubaQmeu7ESU0sXlWnUqnys8EaWkvT2dz7Htbl/ZtT0TEe9FxA/GT2Xb5fl6baHoix8AAABwTJzZNf7/x3g2/j9RdF4AAADAgE0UnQAAAABw6Iz/AQAA4Ogz/gcAAIAj7Wu3b7eXVvf51wv3tzZX6vcvL1QbK+XVzfnyfH1jvbxUry9lv9m3ut/n1er19S/E2ubDSrPaaFYaW9v3Vuuba817y689AhsAAAAYovfOPvldEhE7XzyVLW3vFJ0UMBTJPvXZQ0Ke5Rt/GEJCwNCMFJ0AUJjRohMAClMqOgGgcPtdB+g7eefXg88FAAA4HJOf6n//37UBONrSohMAAIbO/X84vkqvzwC8WlwmQFE+tk/929//b7XeKCEAAGDgxrIlScv5vcCxSNNyOeLd7LEApWRxuVadyscHvx0vnWhvT2fvTPadMwwAAAAAAAAAAAAAAAAAAAAAAAAAdLRaSbQAAACAIy0i/VOS/Zp/xOT4hbHd1wfeSf45nq0j4sFP7v7o4VyzuTHd3v+3l/ubP873XyniCgYAAACwW3ec3h3HAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAgvXj+aL67DDPuX74cERM94589ma1ORikiTv89idFX3pdExMgA4u88joj3e8VP2mnFRHSy6BX/VIHx04g4M4D4cJw9afc/N3t9/9I4l617f/9G8+Vt9e//0uj2fyN9+p93Dxjjg6e/qPSN/zjig9He/U83ftIn/vkDxv/mN7a3+9W1fhox2fP4k7wWq9JcXa80trYvL6/OLVWXqmszM9PXZq/PXp2dqiwu16r5vz1jfP/Tv/zPXu0/3Sf+xD7tv3DA9v/76cPnn+gUS73iXzzf+/j7fp/4aX7s+2xebtdPdss7nfKrPvz5bz7cq/0Lfdr/8u/f40DbjnnxgO2/dOc7zw74UgBgCBpb2ytztVp1460Kg/qcNyykUUBQhUMqnPhopKHQKezVayTD66AAAICB+d9Jf9GZAAAAAAAAAAAAAAAAAAAAwPE1jJ8T2x1zp5imAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADs6b8BAAD///JI2KQ=") lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x2b0, 0x2b0, 0x2b0, 0x138, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x60000016}) 2.199914647s ago: executing program 2 (id=674): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYBLOB='\x00'/18, @ANYRES32, @ANYBLOB], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x8000) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 19.960329ms ago: executing program 2 (id=675): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000180), 0x1, 0x512, &(0x7f0000000c40)="$eJzs3W1rZFcdAPD/vcmk2d3UTFVkLdgWW9ktujNJY9so0lYQfVVQ6/s1JpMQMsmEzKRuQtEsfgBBRAU/gG8EP4Ag+xFEWND3oqKI7upL3St35kbzMJMMySSzTn4/OJlz7sP5n3PJ3LkPh3sDuLJeioh3ImIsIl6NiOlielqk2OukfLnHjz5YzFMSWfbe35JIimn7deXl8Yi4Uaw2GRFf/0rEt5LjcZs7u2sL9XptqyhXW+ub1ebO7p3V9YWV2kptY25u9o35N+dfn5/JCufqZzki3vrSn370/Z99+a1ffebbv7/7l9vfyZv1hY912h0Ri+cK0EOn7lJ7W+zLt9HWRQQbkrw/pbFhtwIAgH7kx/gfjohPto//p2OsfTQHAAAAjJLs7an4VxKRAQAAACMrjYipSNJKMRZgKtK0UumM4f1oXE/rjWbr08uN7Y2lfF5EOUrp8mq9NlOMFS5HKcnLs8UY2/3ya0fKcxHxXET8cPpau1xZbNSXhn3xAwAAAK6IGy8ePv//53TazgMAAAAjptyzAAAAAIwKp/wAAAAw+pz/AwAAwEj76rvv5inbf4/30vs722uN9+8s1ZprlfXtxcpiY2uzstJorLSf2bd+Wn31RmPzs7Gxfa/aqjVb1ebO7t31xvZG6+7qoVdgAwAAAJfouRcf/C6JiL3PX2unKJ4DCHDIH4fdAGCQxobdAGBoxofdAGBoSqcuYQ8Boy45Zf7xwTuda4Xx64tpDwAAMHi3Pn78/v9EMe/0awPA/zNjfQDg6nF3D66u0llHAN4cdEuAYflQ5+OZXvN7Pryjj/v/nWsMWXamhgEAAAMz1U5JWimO06ciTSuViGfbrwUoJcur9dpMcX7w2+nSM3l5tr1mcuqYYQAAAAAAAAAAAAAAAAAAAAAAAACgI8uSyAAAAICRFpH+OWk/zT/i1vQrU4evDhx569dP3/vxvYVWa2s2YiL5+3Q+aSIiWj8ppr+WeSUAAAAAPAU65+nF5+ywWwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn86IPF/XSZcf/6xYgod4s/HpPtz8koRcT1fyQxfmC9JCLGBhB/735E3OwWP4knWZaVi1Z0i3/tguOX25ume/w0Im4MID5cZQ/y/c873b5/abzU/uz+/Rsv0nn13v+l/93/jfXY/zx7pNzL8w9/Ue0Z/37E8+Pd9z/78ZNO/EMh8sLLffbxm9/Y3e0640CV3eIfjFVtrW9Wmzu7d1bXF1ZqK7WNubnZN+bfnH99fqa6vFqvFX+7hvnBJ3755KT+X+8Rv3y4/8e2/yt99T6Lfz+89+gjnUKpW/zbL3f//b3ZI35a/PZ9qsjn82/t5/c6+YNe+PlvXjip/0s9+j95Sv9v99X/+NyrX/veH7rOObY1AIDL0NzZXVuo12tbJ2Qm+1jmkjNvPx3NGGAmno5mDCuTfbfz/3i+es65+rFMdp7Vx2MAzZg49j0di7NWmETs5XX1+Q8JAACMmP8d9J90BwkAAAAAAAAAAAAAAAAAAAC4SGd8LNlkRPS98NGYe8PpKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAif4TAAD//4RX0Xo=") fsopen(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000000)={[{@errors_continue}]}, 0x1, 0x4be, &(0x7f0000000a00)="$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") quotactl$Q_SETINFO(0xffffffff80000600, 0x0, 0xee01, &(0x7f0000000180)={0x20, 0x2, 0x4, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = open(&(0x7f0000000300)='.\x02\x00', 0x14927e, 0x44) fallocate(r7, 0x0, 0x0, 0x1001f0) 0s ago: executing program 6 (id=676): epoll_create1(0x80000) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000280), 0x10, 0x4dc, &(0x7f0000000d80)="$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") lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x2b0, 0x2b0, 0x2b0, 0x138, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x60000016}) kernel console output (not intermixed with test programs): link becomes ready [ 58.518018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.526836][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.533958][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.541991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.551220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.560032][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.567187][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.575232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.585164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.600769][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.610088][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.619495][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.628809][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.643374][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.664909][ T4177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.685254][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.694273][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.703094][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.711662][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.720787][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.729549][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.738867][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.754122][ T4176] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.765895][ T4176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.779923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.788117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.796687][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.805924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.815347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.828448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.836882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.846467][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.860171][ T4177] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.878590][ T4167] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.891448][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.900688][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.925316][ T4166] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.937328][ T4166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.955345][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.966618][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.976953][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.987037][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.996530][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.003643][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.011570][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.021875][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.030532][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.037724][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.046473][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.055402][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.063967][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.071026][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.078960][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.087213][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.125230][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.136857][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.147024][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.156178][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.163294][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.171537][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.180243][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.187982][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.197308][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.206450][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.215984][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.242992][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.255041][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.269489][ T4176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.304468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.318970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.328783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.339758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.349661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.359110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.368508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.382485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.391747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.409283][ T4168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.422348][ T4167] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.435548][ T4167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.452477][ T4177] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.468850][ T4177] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.481480][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.491343][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.499532][ T4216] Bluetooth: hci1: command 0x041b tx timeout [ 59.508599][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.512027][ T4216] Bluetooth: hci3: command 0x041b tx timeout [ 59.517708][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.529960][ T4216] Bluetooth: hci2: command 0x041b tx timeout [ 59.531643][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.537093][ T4216] Bluetooth: hci4: command 0x041b tx timeout [ 59.550873][ T4216] Bluetooth: hci0: command 0x041b tx timeout [ 59.551842][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.566531][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.584165][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.591653][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.604310][ T4166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.635145][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.653204][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.685808][ T4168] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.717493][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.739377][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.752471][ T1287] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.759614][ T1287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.769130][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.786935][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.810456][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.825021][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.838034][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.848185][ T1287] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.855328][ T1287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.869773][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.878524][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.908411][ T4166] device veth0_vlan entered promiscuous mode [ 59.926322][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.936726][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.946000][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.954735][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.963821][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.971279][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.979507][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.987099][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.994767][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.002567][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.022170][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.031273][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.045266][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.053921][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.065330][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.076575][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.088457][ T4166] device veth1_vlan entered promiscuous mode [ 60.103719][ T4167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.110873][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.119312][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.130079][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.142420][ T4177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.153057][ T4176] device veth0_vlan entered promiscuous mode [ 60.176156][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.185161][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.225295][ T4176] device veth1_vlan entered promiscuous mode [ 60.252185][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.261017][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.270071][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.278881][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.287805][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.297766][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.306544][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.315581][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.324269][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.345105][ T4166] device veth0_macvtap entered promiscuous mode [ 60.357098][ T4168] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.370367][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.385569][ T4177] device veth0_vlan entered promiscuous mode [ 60.398017][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.407099][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.415495][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.424896][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.433907][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.442085][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.450936][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.458896][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.475521][ T4167] device veth0_vlan entered promiscuous mode [ 60.496208][ T4166] device veth1_macvtap entered promiscuous mode [ 60.510129][ T4177] device veth1_vlan entered promiscuous mode [ 60.522084][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.531261][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.540648][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.549096][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.558440][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.566927][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.587230][ T4167] device veth1_vlan entered promiscuous mode [ 60.637506][ T4176] device veth0_macvtap entered promiscuous mode [ 60.659188][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.667516][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.678278][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.688626][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.698276][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.710221][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.719012][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.728194][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.737652][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.754333][ T4176] device veth1_macvtap entered promiscuous mode [ 60.765324][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.786795][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.796956][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.806159][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.814827][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.824064][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.832989][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.844691][ T4166] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.854610][ T4166] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.863868][ T4166] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.872574][ T4166] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.885709][ T4177] device veth0_macvtap entered promiscuous mode [ 60.901713][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.913892][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.924477][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.931914][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.945531][ T4167] device veth0_macvtap entered promiscuous mode [ 60.985895][ T4177] device veth1_macvtap entered promiscuous mode [ 61.007239][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.018573][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.030160][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.048233][ T4167] device veth1_macvtap entered promiscuous mode [ 61.065335][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.076401][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.086625][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.098453][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.109884][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.119206][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.127671][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.136805][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.145935][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.154782][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.163843][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.172486][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.182049][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.190960][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.201383][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.212446][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.223619][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.259151][ T4232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.269708][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.278213][ T4232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.287455][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.296445][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.307410][ T4177] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.317531][ T4177] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.326323][ T4177] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.335622][ T4177] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.352989][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.361161][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.376965][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.387963][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.402127][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.412993][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.425100][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.441310][ T4168] device veth0_vlan entered promiscuous mode [ 61.454385][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.467319][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.478316][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.488991][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.499431][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.510173][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.522475][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.530647][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.538647][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.546669][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.555570][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.564875][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.573490][ T4214] Bluetooth: hci0: command 0x040f tx timeout [ 61.576566][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.579620][ T4214] Bluetooth: hci4: command 0x040f tx timeout [ 61.594113][ T4214] Bluetooth: hci2: command 0x040f tx timeout [ 61.602335][ T4214] Bluetooth: hci3: command 0x040f tx timeout [ 61.608537][ T4214] Bluetooth: hci1: command 0x040f tx timeout [ 61.618148][ T4176] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.627960][ T4176] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.636913][ T4176] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.646102][ T4176] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.664895][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.676533][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.686635][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.697366][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.707460][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.718240][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.729476][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.749111][ T4168] device veth1_vlan entered promiscuous mode [ 61.758114][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.766493][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.776119][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.789575][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.798596][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.809659][ T4167] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.820076][ T4167] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.829771][ T4167] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.838639][ T4167] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.864955][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.910503][ T4168] device veth0_macvtap entered promiscuous mode [ 61.937732][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.957865][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.991873][ T4168] device veth1_macvtap entered promiscuous mode [ 62.018862][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.027709][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.067883][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.090656][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.092336][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.140783][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.152194][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.165812][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.176355][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.187557][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.198454][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.211264][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.235964][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.268517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.288216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.306587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.327926][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.339563][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.380188][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.391615][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.401887][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.414199][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.424258][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.435076][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.446534][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.532712][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.978368][ T4251] netlink: 'syz.0.1': attribute type 38 has an invalid length. [ 63.046945][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.091905][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.174491][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.183914][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.247496][ T4168] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.257519][ T4168] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.267082][ T4168] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.275857][ T4168] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.308128][ T1287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.316679][ T1287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.429103][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.480344][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.500307][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.508156][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.529500][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.555978][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.564094][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.564996][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.572194][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.822502][ T4255] loop0: detected capacity change from 0 to 4096 [ 65.102674][ C1] sched: RT throttling activated [ 65.106987][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 65.118457][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 65.119377][ T4232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.125015][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 65.136890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.139047][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 65.215530][ T4232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.402789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.118547][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 66.128035][ T4255] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 66.389724][ T1287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.890543][ T4273] loop4: detected capacity change from 0 to 512 [ 68.885369][ T4272] loop3: detected capacity change from 0 to 512 [ 69.166810][ T4272] ======================================================= [ 69.166810][ T4272] WARNING: The mand mount option has been deprecated and [ 69.166810][ T4272] and is ignored by this kernel. Remove the mand [ 69.166810][ T4272] option from the mount to silence this warning. [ 69.166810][ T4272] ======================================================= [ 69.954667][ T1287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.102837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.120188][ T4272] EXT4-fs: failed to create workqueue [ 70.126553][ T4272] EXT4-fs (loop3): mount failed [ 71.308272][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.316193][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.047007][ T4284] loop0: detected capacity change from 0 to 1024 [ 72.213777][ T4287] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 74.091089][ T4284] EXT4-fs (loop0): Ignoring removed nobh option [ 74.102333][ T4284] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 74.669042][ T4284] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,grpid,barrier=0x0000000000000001,bsdgroups,nouid32,max_dir_size_kb=0x00000000004007b1,abort,nodelalloc,nobh,user_xattr,dioread_lock,dioread_nolock,,errors=continue. Quota mode: none. [ 74.872283][ T4281] infiniband syz1: set down [ 74.886031][ T4281] infiniband syz1: added ipvlan0 [ 74.910658][ T4281] infiniband syz1: Couldn't open port 1 [ 75.269638][ T4281] RDS/IB: syz1: added [ 75.281876][ T4281] smc: adding ib device syz1 with port count 1 [ 75.289422][ T4281] smc: ib device syz1 port 1 has pnetid [ 75.431887][ T4309] loop0: detected capacity change from 0 to 512 [ 75.496453][ T4309] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 75.595378][ T4309] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 75.615915][ T4309] EXT4-fs (loop0): orphan cleanup on readonly fs [ 75.661583][ T4309] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 16777216 out of range 0-5 [ 75.688728][ T4309] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 75.916734][ T4317] loop1: detected capacity change from 0 to 4096 [ 75.940137][ T4309] EXT4-fs error (device loop0): ext4_acquire_dquot:6204: comm syz.0.12: Failed to acquire dquot type 1 [ 75.974915][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 75.984506][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 76.002710][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 76.011618][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 76.020534][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 76.029450][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 76.038361][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 76.047277][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 76.056178][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 76.065097][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 78.157814][ T4309] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.12: bg 0: block 40: padding at end of block bitmap is not set [ 78.358203][ T4317] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 78.502084][ T4309] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 78.940254][ T4309] EXT4-fs (loop0): 1 truncate cleaned up [ 78.973585][ T4309] EXT4-fs (loop0): mounted filesystem without journal. Opts: mblk_io_submit,,errors=continue. Quota mode: writeback. [ 79.504256][ T4323] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.711502][ T4328] syz.0.15 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 81.516326][ T1336] cfg80211: failed to load regulatory.db [ 84.546159][ T4359] loop2: detected capacity change from 0 to 512 [ 88.574578][ T4359] EXT4-fs: failed to create workqueue [ 88.579989][ T4359] EXT4-fs (loop2): mount failed [ 92.182962][ T4387] loop4: detected capacity change from 0 to 4096 [ 93.343090][ T4389] loop2: detected capacity change from 0 to 512 [ 94.315678][ T4394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.29'. [ 98.486818][ T23] Bluetooth: hci5: command 0x0409 tx timeout [ 100.952265][ T4360] Bluetooth: hci5: command 0x041b tx timeout [ 101.258058][ T4257] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.416191][ T4257] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.662073][ T4456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.41'. [ 102.026397][ T4257] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.133061][ T4257] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.323206][ T4397] chnl_net:caif_netlink_parms(): no params data found [ 103.328668][ T1336] Bluetooth: hci5: command 0x040f tx timeout [ 103.675330][ T4481] syz.4.46[4481] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.675870][ T4481] syz.4.46[4481] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.492713][ T4488] fuse: Unknown parameter 'grou00000000000000000000' [ 105.426975][ T4397] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.450507][ T4397] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.726185][ T1336] Bluetooth: hci5: command 0x0419 tx timeout [ 105.768175][ T4397] device bridge_slave_0 entered promiscuous mode [ 105.834415][ T4397] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.861089][ T4397] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.874823][ T4397] device bridge_slave_1 entered promiscuous mode [ 105.919911][ T4397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.937779][ T4397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.386532][ T4397] team0: Port device team_slave_0 added [ 107.526741][ T4397] team0: Port device team_slave_1 added [ 108.399311][ T4397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.412854][ T4397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.413047][ T4397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.415856][ T4397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.449102][ T4520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.53'. [ 108.450856][ T4397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.852919][ T4397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.236044][ T4397] device hsr_slave_0 entered promiscuous mode [ 109.268062][ T4397] device hsr_slave_1 entered promiscuous mode [ 109.432124][ T4397] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.459792][ T4397] Cannot create hsr debugfs directory [ 110.714504][ T4551] syz.1.56[4551] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.715015][ T4551] syz.1.56[4551] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.447309][ T4554] loop4: detected capacity change from 0 to 512 [ 111.535686][ T4556] fuse: Unknown parameter 'grou00000000000000000000' [ 111.546850][ T4554] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 111.586297][ T4554] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 111.604810][ T4554] EXT4-fs (loop4): orphan cleanup on readonly fs [ 111.636427][ T4554] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 16777216 out of range 0-5 [ 111.671524][ T4554] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 111.682370][ T4554] EXT4-fs error (device loop4): ext4_acquire_dquot:6204: comm syz.4.57: Failed to acquire dquot type 1 [ 111.703969][ T4554] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.57: bg 0: block 40: padding at end of block bitmap is not set [ 111.720835][ T4397] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 111.724001][ T1336] libceph: connect (1)[c::]:6789 error -101 [ 111.734247][ T1336] libceph: mon0 (1)[c::]:6789 connect error [ 111.780414][ T4554] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 111.829072][ T4561] ceph: No mds server is up or the cluster is laggy [ 111.839217][ T4397] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 111.869255][ T4554] EXT4-fs (loop4): 1 truncate cleaned up [ 112.228750][ T1336] libceph: connect (1)[c::]:6789 error -101 [ 112.234952][ T1336] libceph: mon0 (1)[c::]:6789 connect error [ 112.244019][ T4554] EXT4-fs (loop4): mounted filesystem without journal. Opts: mblk_io_submit,,errors=continue. Quota mode: writeback. [ 112.262829][ T4397] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 112.330938][ T4397] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 112.748676][ T4257] device hsr_slave_0 left promiscuous mode [ 112.934667][ T4257] device hsr_slave_1 left promiscuous mode [ 112.961394][ T4257] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.878323][ T4257] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.908905][ T4585] loop4: detected capacity change from 0 to 256 [ 113.925764][ T4257] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.960870][ T4257] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.189006][ T4593] loop0: detected capacity change from 0 to 4096 [ 114.201929][ T4257] device bridge_slave_1 left promiscuous mode [ 114.210137][ T4257] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.734189][ T4593] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 117.157184][ T4257] device bridge_slave_0 left promiscuous mode [ 117.182143][ T4257] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.263905][ T4257] device veth1_macvtap left promiscuous mode [ 117.281126][ T4257] device veth0_macvtap left promiscuous mode [ 117.302080][ T4257] device veth1_vlan left promiscuous mode [ 117.842768][ T4608] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 118.750822][ T4257] device veth0_vlan left promiscuous mode [ 118.868870][ T4610] fuse: Unknown parameter 'group_i00000000000000000000' [ 120.011758][ T4257] team0 (unregistering): Port device team_slave_1 removed [ 120.077267][ T4257] team0 (unregistering): Port device team_slave_0 removed [ 120.107517][ T4257] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.149119][ T4257] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.208929][ T4625] loop4: detected capacity change from 0 to 512 [ 121.355666][ T4257] bond0 (unregistering): Released all slaves [ 121.384941][ T4625] EXT4-fs (loop4): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 121.399740][ T4625] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.436854][ T4632] loop1: detected capacity change from 0 to 512 [ 121.551674][ T4397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.578283][ T4625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.73'. [ 121.617038][ T4632] EXT4-fs (loop1): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 121.632827][ T4625] device bridge_slave_1 left promiscuous mode [ 121.639511][ T4632] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.653573][ T4625] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.722059][ T4625] device bridge_slave_0 left promiscuous mode [ 121.739039][ T4625] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.037635][ T4632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.74'. [ 122.048645][ T4632] device bridge_slave_1 left promiscuous mode [ 122.060919][ T4632] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.102862][ T4632] device bridge_slave_0 left promiscuous mode [ 122.849191][ T4654] loop2: detected capacity change from 0 to 4096 [ 123.293860][ T4654] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 123.441378][ T4632] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.629545][ T4397] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.667396][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 123.689041][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 124.686236][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 124.847246][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.872963][ T4674] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 124.878557][ T1287] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.888235][ T1287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.911089][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 124.922580][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.940032][ T1287] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.947216][ T1287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.956627][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 125.276740][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 125.409376][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 125.470518][ T4678] fuse: Unknown parameter 'group_i00000000000000000000' [ 125.492204][ T4682] loop2: detected capacity change from 0 to 256 [ 125.658127][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 125.692887][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 125.732594][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 126.010888][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 126.151067][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 127.184148][ T4397] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 127.231822][ T4397] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 127.264896][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 127.287618][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 127.313543][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 127.338481][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 127.365641][ T1110] libceph: connect (1)[c::]:6789 error -101 [ 127.371824][ T1110] libceph: mon0 (1)[c::]:6789 connect error [ 127.399125][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 127.473541][ T4698] ceph: No mds server is up or the cluster is laggy [ 127.715779][ T4212] libceph: connect (1)[c::]:6789 error -101 [ 127.751037][ T4212] libceph: mon0 (1)[c::]:6789 connect error [ 128.357547][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 128.381867][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 128.498687][ T4397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.371956][ T4746] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 130.204611][ T4750] fuse: Unknown parameter 'group_i00000000000000000000' [ 130.269257][ T4755] loop1: detected capacity change from 0 to 256 [ 130.367434][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 130.383780][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 132.883318][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.889611][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.936755][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 132.963094][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 132.971903][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 132.994206][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 133.039681][ T4764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.93'. [ 133.090894][ T4397] device veth0_vlan entered promiscuous mode [ 133.225158][ T4397] device veth1_vlan entered promiscuous mode [ 133.329023][ T4777] loop1: detected capacity change from 0 to 512 [ 133.473324][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 133.495397][ T4777] EXT4-fs (loop1): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 133.562865][ T4777] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.580047][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 133.606325][ T4397] device veth0_macvtap entered promiscuous mode [ 133.695680][ T4397] device veth1_macvtap entered promiscuous mode [ 133.729426][ T4787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.94'. [ 133.780939][ T4397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.836343][ T4397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.869542][ T4397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.904115][ T4397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.942262][ T4397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.002850][ T4397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.032839][ T4397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.068721][ T4397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.104825][ T4397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.118964][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 134.136814][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 134.163753][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 134.192212][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 134.236371][ T4397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.256498][ T4397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.283865][ T4397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.323542][ T4397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.352865][ T4397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.383624][ T4397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.419575][ T4397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.454005][ T4397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.490612][ T4397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.529404][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 134.562215][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 134.612622][ T4397] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.662691][ T4397] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.671451][ T4397] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.697483][ T4397] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.948047][ T4318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.975002][ T4318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.027312][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 135.059219][ T4296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.088536][ T4296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.127824][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 135.841180][ T4818] loop0: detected capacity change from 0 to 512 [ 135.953000][ T4818] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 136.027506][ T4818] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 136.047126][ T4818] EXT4-fs (loop0): orphan cleanup on readonly fs [ 136.064238][ T4818] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 16777216 out of range 0-5 [ 136.109371][ T4818] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 136.124437][ T4818] EXT4-fs error (device loop0): ext4_acquire_dquot:6204: comm syz.0.101: Failed to acquire dquot type 1 [ 136.183240][ T4818] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.101: bg 0: block 40: padding at end of block bitmap is not set [ 136.218084][ T4828] fuse: Unknown parameter 'group_id00000000000000000000' [ 136.241636][ T4818] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 136.282991][ T4818] EXT4-fs (loop0): 1 truncate cleaned up [ 136.289166][ T4818] EXT4-fs (loop0): mounted filesystem without journal. Opts: mblk_io_submit,,errors=continue. Quota mode: writeback. [ 136.559692][ T4841] loop1: detected capacity change from 0 to 256 [ 137.418069][ T4854] fuse: Unknown parameter 'user_i00000000000000000000' [ 140.283884][ T4886] fuse: Unknown parameter 'group_id00000000000000000000' [ 143.149082][ T4910] fuse: Unknown parameter 'user_i00000000000000000000' [ 143.471326][ T4922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.120'. [ 143.923546][ T4933] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 144.403929][ T4935] loop4: detected capacity change from 0 to 4096 [ 146.724822][ T4935] EXT4-fs: error -4 creating inode table initialization thread [ 146.733176][ T4935] EXT4-fs (loop4): mount failed [ 147.275065][ T4942] fuse: Unknown parameter 'group_id00000000000000000000' [ 148.561894][ T4962] fuse: Unknown parameter 'user_i00000000000000000000' [ 148.587345][ T4959] loop0: detected capacity change from 0 to 512 [ 149.673210][ T4959] EXT4-fs (loop0): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 149.688043][ T4959] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.730850][ T4959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.128'. [ 149.743063][ T4972] loop5: detected capacity change from 0 to 256 [ 149.766498][ T4959] device bridge_slave_1 left promiscuous mode [ 149.779894][ T4959] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.800503][ T4959] device bridge_slave_0 left promiscuous mode [ 149.858149][ T4959] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.421369][ T5017] loop0: detected capacity change from 0 to 4096 [ 154.132578][ T5017] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 154.817581][ T5010] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 155.003355][ T5027] fuse: Bad value for 'user_id' [ 155.096039][ T5032] fuse: Unknown parameter 'user_id00000000000000000000' [ 157.683142][ T5044] netlink: 12 bytes leftover after parsing attributes in process `syz.0.140'. [ 159.418575][ T5055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.145'. [ 159.949733][ T5070] loop4: detected capacity change from 0 to 4096 [ 163.299045][ T5070] EXT4-fs: failed to create workqueue [ 163.304486][ T5070] EXT4-fs (loop4): mount failed [ 164.781206][ T5087] fuse: Bad value for 'user_id' [ 165.156335][ T5095] netlink: 34 bytes leftover after parsing attributes in process `syz.4.152'. [ 166.201929][ T5110] fuse: Unknown parameter 'user_id00000000000000000000' [ 169.784909][ T5111] loop5: detected capacity change from 0 to 4096 [ 170.110210][ T5111] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 170.257579][ T5119] loop1: detected capacity change from 0 to 256 [ 171.736265][ T5135] loop4: detected capacity change from 0 to 256 [ 171.794940][ T5139] fuse: Bad value for 'user_id' [ 171.997493][ T5143] loop5: detected capacity change from 0 to 4096 [ 173.756587][ T5143] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 176.433537][ T5167] netlink: 12 bytes leftover after parsing attributes in process `syz.4.170'. [ 177.636229][ T5182] fuse: Unknown parameter 'user_id00000000000000000000' [ 179.780965][ T5197] fuse: Bad value for 'fd' [ 180.722034][ T5222] loop1: detected capacity change from 0 to 256 [ 180.955707][ T5223] syz.0.180[5223] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 180.955821][ T5223] syz.0.180[5223] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 183.002736][ T4216] Bluetooth: hci3: command 0x0406 tx timeout [ 183.024984][ T4216] Bluetooth: hci0: command 0x0406 tx timeout [ 183.031067][ T4216] Bluetooth: hci1: command 0x0406 tx timeout [ 183.037197][ T4216] Bluetooth: hci2: command 0x0406 tx timeout [ 183.117952][ T5236] loop4: detected capacity change from 0 to 256 [ 183.423696][ T5244] loop5: detected capacity change from 0 to 4096 [ 184.490656][ T5247] netlink: 'syz.1.187': attribute type 11 has an invalid length. [ 186.889816][ T5253] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 186.893797][ T5263] fuse: Bad value for 'fd' [ 186.923031][ T5253] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 187.102588][ T5267] fuse: Bad value for 'fd' [ 188.359252][ T5292] loop2: detected capacity change from 0 to 256 [ 188.714303][ T5299] netlink: 34 bytes leftover after parsing attributes in process `syz.5.188'. [ 190.028978][ T5313] loop1: detected capacity change from 0 to 256 [ 190.141494][ T5315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.199'. [ 191.571995][ T5320] netlink: 'syz.2.200': attribute type 11 has an invalid length. [ 192.376045][ T5326] fuse: Bad value for 'fd' [ 192.556263][ T5331] loop1: detected capacity change from 0 to 256 [ 192.989656][ T5332] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 193.082911][ T5332] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 194.059318][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.065675][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.541164][ T5370] loop2: detected capacity change from 0 to 512 [ 195.873604][ T5378] loop4: detected capacity change from 0 to 4096 [ 197.310875][ T5381] loop5: detected capacity change from 0 to 4096 [ 198.103281][ T5370] EXT4-fs warning (device loop2): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop2. [ 198.982517][ T5378] EXT4-fs: failed to create workqueue [ 198.982575][ T5378] EXT4-fs (loop4): mount failed [ 199.290785][ T5386] loop2: detected capacity change from 0 to 256 [ 201.863989][ T5408] netlink: 12 bytes leftover after parsing attributes in process `syz.0.215'. [ 204.950448][ T5437] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 206.208745][ T5448] netlink: 12 bytes leftover after parsing attributes in process `syz.2.222'. [ 214.562599][ T5491] loop2: detected capacity change from 0 to 1024 [ 214.681354][ T5491] EXT4-fs (loop2): Ignoring removed nobh option [ 214.705482][ T5491] EXT4-fs (loop2): Ignoring removed bh option [ 214.732423][ T5491] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 214.790268][ T5493] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 214.799705][ T5491] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.231: bad orphan inode 32767 [ 214.820377][ T5493] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 214.831420][ T5491] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,noload,journal_dev=0x0000000000000009,data_err=ignore,resgid=0x0000000000000000,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 214.929192][ T5479] netlink: 12 bytes leftover after parsing attributes in process `syz.5.229'. [ 215.608479][ T5521] loop1: detected capacity change from 0 to 4096 [ 219.060452][ T5529] loop4: detected capacity change from 0 to 4096 [ 219.071452][ T5521] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 220.510584][ T5529] EXT4-fs: failed to create workqueue [ 220.516095][ T5529] EXT4-fs (loop4): mount failed [ 222.584450][ T5488] Bluetooth: hci5: command 0x0406 tx timeout [ 222.716627][ T5545] netlink: 12 bytes leftover after parsing attributes in process `syz.1.238'. [ 222.732022][ T5547] netlink: 12 bytes leftover after parsing attributes in process `syz.0.239'. [ 224.198696][ T5564] loop2: detected capacity change from 0 to 256 [ 225.125009][ T5568] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 225.142898][ T5568] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 225.486336][ T5571] netlink: 34 bytes leftover after parsing attributes in process `syz.0.243'. [ 226.954342][ T5576] netlink: 12 bytes leftover after parsing attributes in process `syz.4.246'. [ 227.765199][ T5581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.247'. [ 228.012262][ T5584] loop4: detected capacity change from 0 to 256 [ 230.777197][ T5597] loop2: detected capacity change from 0 to 4096 [ 230.936797][ T5599] netlink: 12 bytes leftover after parsing attributes in process `syz.4.252'. [ 233.725245][ T5597] EXT4-fs: error -4 creating inode table initialization thread [ 233.725556][ T5597] EXT4-fs (loop2): mount failed [ 233.996035][ T5605] netlink: 12 bytes leftover after parsing attributes in process `syz.4.253'. [ 236.916895][ T5616] loop1: detected capacity change from 0 to 4096 [ 237.003082][ T5617] loop4: detected capacity change from 0 to 256 [ 237.480097][ T5620] loop2: detected capacity change from 0 to 256 [ 237.696406][ T5616] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 239.131030][ T1336] Bluetooth: hci4: command 0x0409 tx timeout [ 239.583447][ T5628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.258'. [ 240.881267][ T5634] loop4: detected capacity change from 0 to 256 [ 241.824734][ T1336] Bluetooth: hci4: command 0x041b tx timeout [ 244.134499][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 245.490190][ T5665] loop4: detected capacity change from 0 to 4096 [ 247.113900][ T4244] Bluetooth: hci4: command 0x0419 tx timeout [ 249.810863][ T5609] chnl_net:caif_netlink_parms(): no params data found [ 250.020766][ T5678] netlink: 524 bytes leftover after parsing attributes in process `syz.1.272'. [ 254.259654][ T5703] fuse: Bad value for 'rootmode' [ 254.391584][ T5700] loop2: detected capacity change from 0 to 1024 [ 254.562933][ T5695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.275'. [ 254.572910][ T5698] netlink: 12 bytes leftover after parsing attributes in process `syz.4.274'. [ 255.386019][ T5700] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,,errors=continue. Quota mode: none. [ 255.498418][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.504769][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.025190][ T5721] netlink: 12 bytes leftover after parsing attributes in process `syz.1.278'. [ 256.115524][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.143223][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.243980][ T5609] device bridge_slave_0 entered promiscuous mode [ 256.269067][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.288077][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.350902][ T5609] device bridge_slave_1 entered promiscuous mode [ 256.626252][ T5729] netlink: 12 bytes leftover after parsing attributes in process `syz.1.281'. [ 256.817618][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.035591][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.470018][ T5728] syz.4.282[5728] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.470120][ T5728] syz.4.282[5728] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.493743][ T5609] team0: Port device team_slave_0 added [ 258.515912][ T5609] team0: Port device team_slave_1 added [ 258.589321][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.650265][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.007801][ T5739] loop2: detected capacity change from 0 to 128 [ 259.194446][ T5741] loop1: detected capacity change from 0 to 128 [ 260.151418][ T5742] loop4: detected capacity change from 0 to 4096 [ 265.106164][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.136120][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.268270][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.538506][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.798962][ T5752] fuse: Unknown parameter 'use00000000000000000000' [ 267.759961][ T5756] netlink: 12 bytes leftover after parsing attributes in process `syz.2.286'. [ 268.183669][ T5764] loop2: detected capacity change from 0 to 256 [ 269.155365][ T5609] device hsr_slave_0 entered promiscuous mode [ 271.505468][ T5777] loop0: detected capacity change from 0 to 4096 [ 273.104856][ T5609] device hsr_slave_1 entered promiscuous mode [ 273.126383][ T5609] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.023973][ T5609] Cannot create hsr debugfs directory [ 274.706624][ T5786] loop0: detected capacity change from 0 to 256 [ 277.870057][ T5800] fuse: Unknown parameter 'use00000000000000000000' [ 278.016874][ T5804] loop4: detected capacity change from 0 to 256 [ 278.072405][ T5803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.301'. [ 278.099759][ T4318] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.119659][ T5803] loop2: detected capacity change from 0 to 1024 [ 279.139563][ T4318] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.303313][ T5810] netlink: 'syz.0.303': attribute type 11 has an invalid length. [ 279.324642][ T5803] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,,errors=continue. Quota mode: none. [ 281.101931][ T4318] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.626389][ T5819] loop1: detected capacity change from 0 to 1024 [ 281.645950][ T5817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.302'. [ 281.706967][ T5821] ceph: No mds server is up or the cluster is laggy [ 281.714232][ T4213] libceph: connect (1)[c::]:6789 error -101 [ 281.720222][ T4213] libceph: mon0 (1)[c::]:6789 connect error [ 281.749088][ T4318] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.796798][ T5819] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,,errors=continue. Quota mode: none. [ 281.885304][ T5831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.307'. [ 283.233381][ T5609] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 283.292268][ T5844] fuse: Unknown parameter 'use00000000000000000000' [ 283.311814][ T5609] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 283.540674][ T5609] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 283.610250][ T5609] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 284.034738][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.295617][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 284.310455][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 284.474744][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.559699][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 284.588048][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 284.648480][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.655604][ T4330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.724504][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 284.990481][ T5862] netlink: 'syz.2.314': attribute type 4 has an invalid length. [ 286.037851][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 286.053814][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 286.094809][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.101952][ T4330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.752259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 287.612788][ T5879] netlink: 'syz.2.316': attribute type 11 has an invalid length. [ 287.901266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 287.901778][ T5889] loop1: detected capacity change from 0 to 256 [ 287.938319][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 287.980360][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 288.016932][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 288.047193][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 288.057010][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 288.081295][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 288.097252][ T5896] loop2: detected capacity change from 0 to 1024 [ 288.134139][ T5609] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 288.146381][ T5609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 288.333499][ T5893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.319'. [ 289.917461][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 289.939584][ T5907] fuse: Unknown parameter 'user_i00000000000000000000' [ 289.942415][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 290.046852][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 290.138289][ T5896] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,,errors=continue. Quota mode: none. [ 290.518903][ T5919] netlink: 34 bytes leftover after parsing attributes in process `syz.4.324'. [ 291.663894][ T5936] netlink: 'syz.0.328': attribute type 11 has an invalid length. [ 291.886400][ T5941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.327'. [ 293.599879][ T5963] fuse: Unknown parameter 'user_i00000000000000000000' [ 294.449898][ T1107] Bluetooth: hci5: command 0x0409 tx timeout [ 294.540021][ T5974] netlink: 34 bytes leftover after parsing attributes in process `syz.4.335'. [ 295.587440][ T5947] chnl_net:caif_netlink_parms(): no params data found [ 295.700572][ T5995] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 295.770813][ T5995] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 295.993360][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.032972][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.073790][ T5947] device bridge_slave_0 entered promiscuous mode [ 296.109479][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.158256][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.314209][ T5947] device bridge_slave_1 entered promiscuous mode [ 296.532900][ T1107] Bluetooth: hci5: command 0x041b tx timeout [ 296.561175][ T6009] netlink: 'syz.2.340': attribute type 11 has an invalid length. [ 296.761354][ T5947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.789822][ T23] libceph: connect (1)[c::]:6789 error -101 [ 296.796075][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 296.825878][ T6018] ceph: No mds server is up or the cluster is laggy [ 296.834722][ T6022] fuse: Unknown parameter 'user_i00000000000000000000' [ 296.851730][ T5947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.096425][ T23] libceph: connect (1)[c::]:6789 error -101 [ 297.125925][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 297.312227][ T5947] team0: Port device team_slave_0 added [ 297.346945][ T5947] team0: Port device team_slave_1 added [ 297.432459][ T6044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.347'. [ 297.552756][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.574466][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.737782][ T5947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.824055][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.878981][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.075633][ T5947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.134125][ T4318] device hsr_slave_0 left promiscuous mode [ 298.313309][ T4318] device hsr_slave_1 left promiscuous mode [ 299.219264][ T1107] Bluetooth: hci5: command 0x040f tx timeout [ 299.257970][ T4318] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.292703][ T4318] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.322460][ T4318] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.340751][ T4318] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.371011][ T4318] device bridge_slave_1 left promiscuous mode [ 299.387499][ T4318] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.409525][ T4318] device bridge_slave_0 left promiscuous mode [ 299.427070][ T4318] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.477497][ T4318] device veth1_macvtap left promiscuous mode [ 299.511452][ T4318] device veth0_macvtap left promiscuous mode [ 299.518128][ T4318] device veth1_vlan left promiscuous mode [ 299.528467][ T4318] device veth0_vlan left promiscuous mode [ 300.552540][ T4318] team0 (unregistering): Port device team_slave_1 removed [ 300.597690][ T4318] team0 (unregistering): Port device team_slave_0 removed [ 300.638028][ T4318] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.670515][ T4318] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.990101][ T4318] bond0 (unregistering): Released all slaves [ 301.121761][ T6069] netlink: 'syz.4.353': attribute type 11 has an invalid length. [ 301.252825][ T1107] Bluetooth: hci5: command 0x0419 tx timeout [ 301.395182][ T6075] fuse: Unknown parameter 'user_id00000000000000000000' [ 301.425356][ T5947] device hsr_slave_0 entered promiscuous mode [ 301.597640][ T6083] loop4: detected capacity change from 0 to 4096 [ 301.622069][ T5947] device hsr_slave_1 entered promiscuous mode [ 301.632871][ T23] libceph: connect (1)[c::]:6789 error -101 [ 301.639117][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 301.645192][ T5947] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 301.657886][ T6083] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 301.674766][ T6081] ceph: No mds server is up or the cluster is laggy [ 301.681914][ T5947] Cannot create hsr debugfs directory [ 301.854523][ T6090] netlink: 34 bytes leftover after parsing attributes in process `syz.0.354'. [ 303.431847][ T6106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.361'. [ 303.616720][ T6120] netlink: 'syz.0.365': attribute type 11 has an invalid length. [ 305.069490][ T5947] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 305.153235][ T5947] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 305.198470][ T6131] fuse: Unknown parameter 'user_id00000000000000000000' [ 305.264589][ T5947] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 305.470923][ T5947] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 306.968889][ T5947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.038887][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 307.090300][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 307.951524][ T5947] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.987347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 308.031334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 308.073473][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.080594][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.150835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 308.217525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 308.304894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 308.364489][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.371589][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.491892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 308.565919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 308.614002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 308.674811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 308.724018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 308.823867][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 308.858774][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 308.953538][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 309.027095][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 309.057537][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 309.094720][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 309.150101][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 309.372985][ T6172] netlink: 'syz.2.372': attribute type 4 has an invalid length. [ 309.757820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 309.775706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 309.798826][ T5947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.929750][ T6188] fuse: Unknown parameter 'user_id00000000000000000000' [ 309.946978][ T6190] netlink: 34 bytes leftover after parsing attributes in process `syz.2.374'. [ 310.113867][ T6199] netlink: 'syz.4.377': attribute type 11 has an invalid length. [ 310.127364][ T6196] netlink: 'syz.0.375': attribute type 4 has an invalid length. [ 314.072958][ T6218] syz.0.379[6218] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 314.073054][ T6218] syz.0.379[6218] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 314.119658][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 314.532687][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 314.615752][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 314.627522][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 314.644459][ T5947] device veth0_vlan entered promiscuous mode [ 314.651436][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 314.806401][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 314.822067][ T5947] device veth1_vlan entered promiscuous mode [ 314.935309][ T6228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.382'. [ 314.977672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 314.996983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 315.024227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 315.060373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 315.089510][ T5947] device veth0_macvtap entered promiscuous mode [ 315.148173][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 315.173689][ T5947] device veth1_macvtap entered promiscuous mode [ 315.304979][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.359003][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.411991][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.463248][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.516629][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.580425][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.611264][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.662499][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.713191][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.722350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 315.735240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 315.760123][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.771082][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.781384][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.793675][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.804582][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.865811][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.932638][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.987922][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.003283][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.012423][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 316.025744][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 316.043704][ T5947] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.069792][ T5947] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.092417][ T5947] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.124051][ T5947] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.413126][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.444186][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.518930][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 316.542422][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.551716][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.656290][ T6252] netlink: 34 bytes leftover after parsing attributes in process `syz.1.394'. [ 316.730434][ T6256] loop2: detected capacity change from 0 to 1024 [ 316.834246][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 316.864268][ T6254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.385'. [ 316.937186][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.943531][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.974020][ T6256] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,,errors=continue. Quota mode: none. [ 317.251638][ T6266] loop6: detected capacity change from 0 to 4096 [ 319.142268][ T6266] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 320.474848][ T6276] loop1: detected capacity change from 0 to 512 [ 320.576924][ T6276] EXT4-fs (loop1): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 320.592201][ T6276] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.611495][ T6276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.388'. [ 321.075660][ T6290] loop6: detected capacity change from 0 to 512 [ 321.084063][ T6288] fuse: Bad value for 'fd' [ 321.154006][ T6290] EXT4-fs (loop6): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 321.168541][ T6290] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.234670][ T6294] loop0: detected capacity change from 0 to 256 [ 321.254150][ T6290] netlink: 4 bytes leftover after parsing attributes in process `syz.6.389'. [ 321.263537][ T6290] device bridge_slave_1 left promiscuous mode [ 321.269786][ T6290] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.287923][ T6290] device bridge_slave_0 left promiscuous mode [ 321.294548][ T6290] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.908924][ T6314] syz.4.393[6314] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 322.909167][ T6314] syz.4.393[6314] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 324.498173][ T6309] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 324.577561][ T6322] netlink: 'syz.2.400': attribute type 4 has an invalid length. [ 324.623399][ T6320] netlink: 4 bytes leftover after parsing attributes in process `syz.4.399'. [ 324.731899][ T6330] fuse: Bad value for 'fd' [ 324.739553][ T6331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.397'. [ 324.779918][ T6320] loop4: detected capacity change from 0 to 1024 [ 324.792780][ T6331] loop1: detected capacity change from 0 to 1024 [ 326.326552][ T6331] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,,errors=continue. Quota mode: none. [ 326.332933][ T6320] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,,errors=continue. Quota mode: none. [ 326.339433][ T6332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.401'. [ 327.293073][ T6357] netlink: 'syz.6.406': attribute type 11 has an invalid length. [ 333.448392][ T6385] fuse: Bad value for 'fd' [ 333.739577][ T6393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.414'. [ 333.768419][ T6399] loop2: detected capacity change from 0 to 512 [ 334.842782][ T6399] EXT4-fs (loop2): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 334.857403][ T6399] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 334.875838][ T6399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.415'. [ 334.885993][ T6399] device bridge_slave_1 left promiscuous mode [ 334.892282][ T6399] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.051483][ T6393] loop0: detected capacity change from 0 to 1024 [ 335.094485][ T6399] device bridge_slave_0 left promiscuous mode [ 335.101152][ T6399] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.174792][ T6393] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,,errors=continue. Quota mode: none. [ 335.914332][ T6424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.419'. [ 336.539828][ T6428] loop0: detected capacity change from 0 to 1024 [ 336.640618][ T6433] netlink: 'syz.4.423': attribute type 11 has an invalid length. [ 336.706304][ T6428] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,,errors=continue. Quota mode: none. [ 338.798731][ T6447] netlink: 34 bytes leftover after parsing attributes in process `syz.6.424'. [ 338.881493][ T6451] fuse: Unknown parameter '00000000000000000003' [ 339.173664][ T6459] netlink: 'syz.4.430': attribute type 4 has an invalid length. [ 339.333434][ T6463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.431'. [ 339.399358][ T6469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.432'. [ 339.565957][ T6467] loop1: detected capacity change from 0 to 1024 [ 340.017306][ T6467] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,,errors=continue. Quota mode: none. [ 344.399600][ T6509] netlink: 34 bytes leftover after parsing attributes in process `syz.2.438'. [ 345.202294][ T6516] netlink: 'syz.0.441': attribute type 11 has an invalid length. [ 345.892167][ T6523] fuse: Unknown parameter '00000000000000000003' [ 346.095880][ T4318] device hsr_slave_0 left promiscuous mode [ 346.229019][ T4318] device hsr_slave_1 left promiscuous mode [ 346.262989][ T4318] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.853254][ T4318] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.867029][ T4318] device bridge_slave_1 left promiscuous mode [ 347.873334][ T4318] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.899815][ T4318] device bridge_slave_0 left promiscuous mode [ 347.907534][ T4318] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.880070][ T4318] team0 (unregistering): Port device team_slave_1 removed [ 349.921244][ T4318] team0 (unregistering): Port device team_slave_0 removed [ 349.958642][ T4318] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.979859][ T4318] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.179646][ T6559] loop6: detected capacity change from 0 to 8192 [ 350.238055][ T6559] loop6: p1 p2 p3 p4 [ 350.262017][ T6559] loop6: p1 size 108922248 extends beyond EOD, truncated [ 350.281840][ T6559] loop6: p2 start 861536256 is beyond EOD, truncated [ 350.291281][ T6559] loop6: p3 start 851968 is beyond EOD, truncated [ 350.933595][ T4318] bond0 (unregistering): Released all slaves [ 350.943535][ T6559] loop6: p4 size 65536 extends beyond EOD, truncated [ 351.051554][ T3546] loop6: p1 p2 p3 p4 [ 351.091350][ T3546] loop6: p1 size 108922248 extends beyond EOD, truncated [ 351.106573][ T3546] loop6: p2 start 861536256 is beyond EOD, truncated [ 351.115959][ T3546] loop6: p3 start 851968 is beyond EOD, truncated [ 351.122518][ T3546] loop6: p4 size 65536 extends beyond EOD, truncated [ 351.303724][ T6551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.450'. [ 351.372961][ T6553] netlink: 4 bytes leftover after parsing attributes in process `syz.6.449'. [ 351.668549][ T6570] netlink: 'syz.2.453': attribute type 11 has an invalid length. [ 351.876060][ T6582] fuse: Unknown parameter '00000000000000000003' [ 353.878727][ T6598] syz.4.460[6598] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 353.878833][ T6598] syz.4.460[6598] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 354.730032][ T6609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.461'. [ 354.898534][ T4160] udevd[4160]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 354.909603][ T4450] udevd[4450]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 355.196643][ T6619] loop0: detected capacity change from 0 to 1024 [ 355.394069][ T6619] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,,errors=continue. Quota mode: none. [ 356.169341][ T6640] netlink: 'syz.0.468': attribute type 11 has an invalid length. [ 359.202836][ T6654] fuse: Unknown parameter '00000000000000000003' [ 360.942789][ T6665] netlink: 12 bytes leftover after parsing attributes in process `syz.2.472'. [ 362.858908][ T6676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.475'. [ 362.995267][ T6688] loop6: detected capacity change from 0 to 512 [ 363.192241][ T6688] EXT4-fs (loop6): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 363.206835][ T6688] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 363.274731][ T6696] netlink: 4 bytes leftover after parsing attributes in process `syz.6.477'. [ 363.758495][ T6709] loop1: detected capacity change from 0 to 512 [ 364.912306][ T6709] EXT4-fs (loop1): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 364.927002][ T6709] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 364.997393][ T6720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.480'. [ 365.075261][ T6722] loop0: detected capacity change from 0 to 512 [ 365.133270][ T6722] EXT4-fs (loop0): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 365.148134][ T6722] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 365.166520][ T6722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.481'. [ 365.291427][ T6728] netlink: 'syz.4.482': attribute type 4 has an invalid length. [ 365.314394][ T6730] netlink: 'syz.2.483': attribute type 4 has an invalid length. [ 365.478756][ T6738] fuse: Unknown parameter '00000000000000000003' [ 365.953052][ T6749] syz.2.484[6749] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 365.953157][ T6749] syz.2.484[6749] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 367.265731][ T6769] netlink: 8 bytes leftover after parsing attributes in process `syz.6.489'. [ 367.975147][ T6777] netlink: 28 bytes leftover after parsing attributes in process `syz.6.491'. [ 368.908555][ T6781] netlink: 4 bytes leftover after parsing attributes in process `syz.6.494'. [ 368.954940][ T6787] loop2: detected capacity change from 0 to 512 [ 369.089699][ T6781] loop6: detected capacity change from 0 to 1024 [ 369.163494][ T6787] EXT4-fs (loop2): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 369.178106][ T6787] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.253561][ T6795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.495'. [ 369.281101][ T6781] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,,errors=continue. Quota mode: none. [ 369.614379][ T6801] fuse: Unknown parameter '00000000000000000003' [ 369.908554][ T6807] loop6: detected capacity change from 0 to 512 [ 371.063381][ T6807] EXT4-fs (loop6): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 371.077994][ T6807] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 371.150394][ T6817] netlink: 4 bytes leftover after parsing attributes in process `syz.6.497'. [ 371.889285][ T6829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.501'. [ 372.805983][ T6860] syz.1.505[6860] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 372.806428][ T6860] syz.1.505[6860] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 373.728277][ T6881] loop0: detected capacity change from 0 to 8192 [ 373.830714][ T6878] loop0: p1 p2 p3 p4 [ 373.837082][ T6878] loop0: p1 size 108922248 extends beyond EOD, truncated [ 373.871081][ T6878] loop0: p2 start 861536256 is beyond EOD, truncated [ 373.890752][ T6878] loop0: p3 start 851968 is beyond EOD, truncated [ 373.910899][ T6878] loop0: p4 size 65536 extends beyond EOD, truncated [ 373.963146][ T6881] loop0: p1 p2 p3 p4 [ 373.984510][ T6881] loop0: p1 size 108922248 extends beyond EOD, truncated [ 374.038888][ T6881] loop0: p2 start 861536256 is beyond EOD, truncated [ 374.065073][ T6881] loop0: p3 start 851968 is beyond EOD, truncated [ 374.093764][ T6881] loop0: p4 size 65536 extends beyond EOD, truncated [ 374.126887][ T6891] loop6: detected capacity change from 0 to 512 [ 374.211482][ T6891] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 374.304010][ T6891] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 374.364770][ T6891] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2219: inode #15: comm syz.6.511: corrupted in-inode xattr [ 374.436914][ T6891] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.511: couldn't read orphan inode 15 (err -117) [ 374.453832][ T4450] udevd[4450]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 374.467559][ T4160] udevd[4160]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 374.495574][ T6891] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,max_batch_time=0x0000000000000001,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 374.769062][ T4450] udevd[4450]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 374.825700][ T4160] udevd[4160]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 374.846940][ T6912] netlink: 12 bytes leftover after parsing attributes in process `syz.0.513'. [ 375.797411][ T4450] udevd[4450]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 375.831947][ T4160] udevd[4160]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 376.132396][ T6924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.518'. [ 376.207901][ T6925] netlink: 8 bytes leftover after parsing attributes in process `syz.6.517'. [ 376.598164][ T6926] loop4: detected capacity change from 0 to 8192 [ 376.999683][ T6926] loop4: p1 p2 p3 p4 [ 377.004812][ T6926] loop4: p1 size 108922248 extends beyond EOD, truncated [ 377.035037][ T6926] loop4: p2 start 861536256 is beyond EOD, truncated [ 377.056490][ T6926] loop4: p3 start 851968 is beyond EOD, truncated [ 377.233772][ T6926] loop4: p4 size 65536 extends beyond EOD, truncated [ 378.060156][ T3546] loop4: p1 p2 p3 p4 [ 378.086925][ T3546] loop4: p1 size 108922248 extends beyond EOD, truncated [ 378.292918][ T3546] loop4: p2 start 861536256 is beyond EOD, truncated [ 378.299647][ T3546] loop4: p3 start 851968 is beyond EOD, truncated [ 378.356751][ T3546] loop4: p4 size 65536 extends beyond EOD, truncated [ 378.372365][ T6948] loop0: detected capacity change from 0 to 512 [ 378.383117][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.389462][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.610959][ T6948] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 379.464995][ T6948] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 379.474561][ T6948] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2219: inode #15: comm syz.0.521: corrupted in-inode xattr [ 379.487663][ T6948] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.521: couldn't read orphan inode 15 (err -117) [ 379.500907][ T6948] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,max_batch_time=0x0000000000000001,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 379.677811][ T4160] udevd[4160]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 379.736073][ T4450] udevd[4450]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 380.234484][ T4450] udevd[4450]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 380.249403][ T4160] udevd[4160]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 380.914803][ T6973] netlink: 4 bytes leftover after parsing attributes in process `syz.4.529'. [ 381.249471][ T6978] loop1: detected capacity change from 0 to 512 [ 381.487608][ T6976] loop4: detected capacity change from 0 to 8192 [ 381.738050][ T6976] loop4: p1 p2 p3 p4 [ 381.752129][ T6976] loop4: p1 size 108922248 extends beyond EOD, truncated [ 381.783858][ T6978] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 381.876031][ T6978] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 381.890692][ T6978] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.530: corrupted in-inode xattr [ 381.905131][ T6978] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.530: couldn't read orphan inode 15 (err -117) [ 381.918903][ T6978] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,max_batch_time=0x0000000000000001,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 382.380887][ T6976] loop4: p2 start 861536256 is beyond EOD, truncated [ 382.418260][ T6976] loop4: p3 start 851968 is beyond EOD, truncated [ 382.468692][ T6976] loop4: p4 size 65536 extends beyond EOD, truncated [ 382.867382][ T6988] netlink: 148 bytes leftover after parsing attributes in process `syz.2.533'. [ 382.943013][ T6988] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 383.105567][ T6987] loop1: detected capacity change from 0 to 8192 [ 383.161457][ T6987] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 383.633944][ T7000] loop0: detected capacity change from 0 to 512 [ 384.368236][ T7000] EXT4-fs (loop0): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 384.382863][ T7000] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 384.650212][ T7012] netlink: 'syz.1.538': attribute type 10 has an invalid length. [ 384.748275][ T7012] netlink: 40 bytes leftover after parsing attributes in process `syz.1.538'. [ 384.819791][ T7012] device batadv0 entered promiscuous mode [ 384.826930][ T7012] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 384.847454][ T7015] netlink: 'syz.4.540': attribute type 10 has an invalid length. [ 384.889472][ T7015] netlink: 40 bytes leftover after parsing attributes in process `syz.4.540'. [ 384.900239][ T7015] device batadv0 entered promiscuous mode [ 384.907400][ T7015] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 384.950936][ T7021] netlink: 'syz.6.541': attribute type 10 has an invalid length. [ 384.971710][ T7021] netlink: 40 bytes leftover after parsing attributes in process `syz.6.541'. [ 384.994673][ T7021] device batadv0 entered promiscuous mode [ 385.006654][ T7021] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 385.024600][ T1110] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 385.394821][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 385.463027][ T1110] usb 2-1: Using ep0 maxpacket: 8 [ 385.603426][ T1110] usb 2-1: config 0 has no interfaces? [ 385.610973][ T1110] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 385.672942][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 385.736804][ T1110] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.803497][ T23] usb 5-1: config 0 has no interfaces? [ 385.811050][ T23] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 386.057417][ T6235] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 386.068130][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.107313][ T1110] usb 2-1: config 0 descriptor?? [ 386.112807][ T23] usb 5-1: config 0 descriptor?? [ 386.416840][ T7011] batman_adv: batadv0: Adding interface: dummy0 [ 386.423397][ T7011] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.449097][ T7011] batman_adv: batadv0: Interface activated: dummy0 [ 386.529418][ T6235] usb 7-1: Using ep0 maxpacket: 8 [ 386.763130][ T6235] usb 7-1: config 0 has no interfaces? [ 386.794266][ T6235] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 386.894588][ T6235] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.006513][ T6235] usb 7-1: config 0 descriptor?? [ 387.286405][ T7011] batadv0: mtu less than device minimum [ 387.314054][ T7011] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 387.327011][ T7011] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 387.339538][ T7011] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 387.352174][ T7011] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 387.364837][ T7011] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 387.413526][ T7009] batman_adv: batadv0: Adding interface: dummy0 [ 387.419813][ T7009] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.454323][ T7009] batman_adv: batadv0: Interface activated: dummy0 [ 387.463195][ T7034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.546'. [ 387.486135][ T23] usb 2-1: USB disconnect, device number 2 [ 387.528766][ T5853] usb 5-1: USB disconnect, device number 2 [ 387.555050][ T7036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.545'. [ 387.605741][ T7018] batman_adv: batadv0: Adding interface: dummy0 [ 387.612047][ T7018] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.642835][ T7018] batman_adv: batadv0: Interface activated: dummy0 [ 387.646022][ T7037] loop2: detected capacity change from 0 to 8192 [ 387.728549][ T7038] loop0: detected capacity change from 0 to 8192 [ 387.742943][ T7037] loop2: p1 p2 p3 p4 [ 387.748291][ T7037] loop2: p1 size 108922248 extends beyond EOD, truncated [ 387.757768][ T7037] loop2: p2 start 861536256 is beyond EOD, truncated [ 387.771144][ T7037] loop2: p3 start 851968 is beyond EOD, truncated [ 387.777684][ T7037] loop2: p4 size 65536 extends beyond EOD, truncated [ 387.779108][ T5853] usb 7-1: USB disconnect, device number 2 [ 387.795752][ T7038] loop0: p1 p2 p3 p4 [ 387.799980][ T7038] loop0: p1 size 108922248 extends beyond EOD, truncated [ 387.809056][ T7038] loop0: p2 start 861536256 is beyond EOD, truncated [ 387.817374][ T7038] loop0: p3 start 851968 is beyond EOD, truncated [ 387.824133][ T7038] loop0: p4 size 65536 extends beyond EOD, truncated [ 387.997218][ T7036] loop0: detected capacity change from 0 to 512 [ 388.015661][ T4450] udevd[4450]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 388.031098][ T7036] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 388.068481][ T7036] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 388.074585][ T4160] udevd[4160]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 388.100252][ T4450] udevd[4450]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 388.157784][ T7036] EXT4-fs (loop0): 1 truncate cleaned up [ 388.168108][ T7036] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000358,resuid=0x0000000000000000,stripe=0x0000000000000009,,errors=continue. Quota mode: none. [ 388.202372][ T7043] netlink: 148 bytes leftover after parsing attributes in process `syz.1.547'. [ 388.232160][ T4160] udevd[4160]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 388.347092][ T4450] udevd[4450]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 388.360718][ T4160] udevd[4160]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 388.372406][ T7043] net_ratelimit: 34 callbacks suppressed [ 388.372424][ T7043] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 390.135671][ T7066] netlink: 160 bytes leftover after parsing attributes in process `syz.4.555'. [ 390.292808][ T7066] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 390.822232][ T7074] loop6: detected capacity change from 0 to 512 [ 391.013354][ T7074] EXT4-fs (loop6): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 391.028243][ T7074] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 392.122386][ T7089] netlink: 'syz.4.559': attribute type 10 has an invalid length. [ 392.184951][ T7089] netlink: 40 bytes leftover after parsing attributes in process `syz.4.559'. [ 392.240875][ T7089] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 392.528354][ T4360] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 392.785856][ T4360] usb 5-1: Using ep0 maxpacket: 8 [ 392.912901][ T4360] usb 5-1: config 0 has no interfaces? [ 392.922666][ T4360] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 392.986919][ T4360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.047293][ T4360] usb 5-1: config 0 descriptor?? [ 393.128672][ T7097] netlink: 'syz.1.561': attribute type 10 has an invalid length. [ 393.201527][ T7097] netlink: 40 bytes leftover after parsing attributes in process `syz.1.561'. [ 393.282104][ T7097] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 393.384874][ T6235] usb 5-1: USB disconnect, device number 3 [ 393.452984][ T4214] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 393.732758][ T4214] usb 2-1: Using ep0 maxpacket: 8 [ 393.883237][ T4214] usb 2-1: config 0 has no interfaces? [ 393.889241][ T4214] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 393.942068][ T4214] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.996780][ T4214] usb 2-1: config 0 descriptor?? [ 394.204488][ T7111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.575'. [ 395.095743][ T7115] loop0: detected capacity change from 0 to 256 [ 395.195363][ T7094] batadv0: mtu less than device minimum [ 395.240795][ T7094] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 395.253479][ T7094] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 395.266636][ T7094] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 395.279091][ T7094] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 395.291600][ T7094] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 395.304189][ T7094] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 395.316663][ T7094] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 395.329137][ T7094] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 395.341705][ T7094] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 395.812658][ T7] usb 2-1: USB disconnect, device number 3 [ 399.411483][ T7161] loop1: detected capacity change from 0 to 8192 [ 399.559528][ T7161] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 400.357949][ T7167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.582'. [ 401.639084][ T7167] loop2: detected capacity change from 0 to 8192 [ 401.706124][ T7167] loop2: p1 p2 p3 p4 [ 401.711763][ T7167] loop2: p1 size 108922248 extends beyond EOD, truncated [ 401.789073][ T7167] loop2: p2 start 861536256 is beyond EOD, truncated [ 401.836846][ T7167] loop2: p3 start 851968 is beyond EOD, truncated [ 401.852727][ T7167] loop2: p4 size 65536 extends beyond EOD, truncated [ 401.979966][ T7190] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 402.757986][ T4450] udevd[4450]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 402.787475][ T4160] udevd[4160]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 402.821863][ T7207] loop6: detected capacity change from 0 to 512 [ 403.017481][ T7207] EXT4-fs (loop6): 1 orphan inode deleted [ 403.033634][ T7207] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 403.306869][ T7207] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 403.946337][ T7218] xt_TPROXY: Can be used only with -p tcp or -p udp [ 406.143586][ T7240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.601'. [ 406.362131][ T7243] loop1: detected capacity change from 0 to 8192 [ 406.917469][ T7243] loop1: p1 p2 p3 p4 [ 406.982941][ T7243] loop1: p1 size 108922248 extends beyond EOD, truncated [ 407.017092][ T7249] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 407.033767][ T7243] loop1: p2 start 861536256 is beyond EOD, truncated [ 407.040496][ T7243] loop1: p3 start 851968 is beyond EOD, truncated [ 407.162999][ T7243] loop1: p4 size 65536 extends beyond EOD, truncated [ 407.285747][ T7251] syz.6.600[7251] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 407.285817][ T7251] syz.6.600[7251] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 407.365133][ T7254] loop0: detected capacity change from 0 to 256 [ 408.174646][ T7261] netlink: 34 bytes leftover after parsing attributes in process `syz.4.605'. [ 408.816050][ T4160] udevd[4160]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 408.816761][ T4450] udevd[4450]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 408.896534][ T7270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.609'. [ 409.219028][ T7270] loop0: detected capacity change from 0 to 8192 [ 409.311836][ T7273] loop0: p1 p2 p3 p4 [ 409.323625][ T7273] loop0: p1 size 108922248 extends beyond EOD, truncated [ 409.353382][ T7273] loop0: p2 start 861536256 is beyond EOD, truncated [ 409.373536][ T7273] loop0: p3 start 851968 is beyond EOD, truncated [ 409.380002][ T7273] loop0: p4 size 65536 extends beyond EOD, truncated [ 409.494012][ T7270] loop0: p1 p2 p3 p4 [ 409.498217][ T7270] loop0: p1 size 108922248 extends beyond EOD, truncated [ 409.604214][ T7270] loop0: p2 start 861536256 is beyond EOD, truncated [ 409.629326][ T7270] loop0: p3 start 851968 is beyond EOD, truncated [ 409.642564][ T7270] loop0: p4 size 65536 extends beyond EOD, truncated [ 410.138158][ T7282] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 410.186856][ T7287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.614'. [ 410.315808][ T4184] udevd[4184]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 410.345608][ T4160] udevd[4160]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 410.429685][ T4450] udevd[4450]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 410.448683][ T4160] udevd[4160]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 410.476635][ T7290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.615'. [ 410.565284][ T7287] loop2: detected capacity change from 0 to 8192 [ 410.633166][ T4160] udevd[4160]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 410.729345][ T7287] loop2: p1 p2 p3 p4 [ 410.734236][ T7287] loop2: p1 size 108922248 extends beyond EOD, truncated [ 410.788171][ T7287] loop2: p2 start 861536256 is beyond EOD, truncated [ 410.798120][ T7287] loop2: p3 start 851968 is beyond EOD, truncated [ 410.806854][ T7287] loop2: p4 size 65536 extends beyond EOD, truncated [ 410.821576][ T7290] loop0: detected capacity change from 0 to 8192 [ 410.901081][ T4160] udevd[4160]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 410.998875][ T3546] loop2: p1 p2 p3 p4 [ 411.033148][ T3546] loop2: p1 size 108922248 extends beyond EOD, truncated [ 411.101707][ T7303] netlink: 34 bytes leftover after parsing attributes in process `syz.4.618'. [ 411.359244][ T7290] loop0: p1 p2 p3 p4 [ 411.373873][ T3546] loop2: p2 start 861536256 is beyond EOD, truncated [ 411.400797][ T7290] loop0: p1 size 108922248 extends beyond EOD, truncated [ 411.419542][ T3546] loop2: p3 start 851968 is beyond EOD, truncated [ 411.473408][ T3546] loop2: p4 size 65536 extends beyond EOD, truncated [ 411.508787][ T7290] loop0: p2 start 861536256 is beyond EOD, truncated [ 411.561123][ T7290] loop0: p3 start 851968 is beyond EOD, truncated [ 411.807394][ T7290] loop0: p4 size 65536 extends beyond EOD, truncated [ 411.909896][ T4450] udevd[4450]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 412.086377][ T4450] udevd[4450]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 412.094063][ T7309] loop2: detected capacity change from 0 to 256 [ 412.919600][ T7325] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 413.113671][ T7328] loop2: detected capacity change from 0 to 512 [ 413.763881][ T7328] EXT4-fs (loop2): 1 orphan inode deleted [ 414.717268][ T7340] syz.4.627[7340] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 414.717363][ T7340] syz.4.627[7340] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 415.464278][ T7328] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 415.525376][ T7328] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 415.828990][ T7355] netlink: 34 bytes leftover after parsing attributes in process `syz.1.630'. [ 416.546202][ T7353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.632'. [ 417.090599][ T7362] loop0: detected capacity change from 0 to 256 [ 417.492659][ T23] Bluetooth: hci5: command 0x0406 tx timeout [ 418.107114][ T7377] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 420.052735][ T1110] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 420.342972][ T1110] usb 7-1: Using ep0 maxpacket: 8 [ 420.642713][ T1110] usb 7-1: config 0 has no interfaces? [ 420.658460][ T1110] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 420.831373][ T1110] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.839174][ T7398] loop0: detected capacity change from 0 to 512 [ 420.842756][ T1110] usb 7-1: config 0 descriptor?? [ 421.233036][ T1107] usb 7-1: USB disconnect, device number 3 [ 421.301555][ T7395] syz.4.643[7395] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 421.301654][ T7395] syz.4.643[7395] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 421.366345][ T7398] EXT4-fs (loop0): 1 orphan inode deleted [ 421.402865][ T7398] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 421.438739][ T7398] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 422.921648][ T7417] netlink: 34 bytes leftover after parsing attributes in process `syz.1.644'. [ 423.767090][ T7425] netlink: 8 bytes leftover after parsing attributes in process `syz.6.648'. [ 424.488968][ T7432] netlink: 'syz.6.651': attribute type 10 has an invalid length. [ 424.497162][ T7432] netlink: 40 bytes leftover after parsing attributes in process `syz.6.651'. [ 424.544064][ T7432] net_ratelimit: 10 callbacks suppressed [ 424.544084][ T7432] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 424.989650][ T7439] netlink: 'syz.4.653': attribute type 10 has an invalid length. [ 424.998031][ T7439] netlink: 40 bytes leftover after parsing attributes in process `syz.4.653'. [ 425.029210][ T7439] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 425.693072][ T6235] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 425.748742][ T7] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 425.749284][ T7450] netlink: 'syz.2.656': attribute type 10 has an invalid length. [ 425.834564][ T7450] netlink: 40 bytes leftover after parsing attributes in process `syz.2.656'. [ 425.847571][ T7450] device batadv0 entered promiscuous mode [ 425.850844][ T7451] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 425.857983][ T7450] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 425.963075][ T6235] usb 7-1: Using ep0 maxpacket: 8 [ 426.065249][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 426.142980][ T6235] usb 7-1: config 0 has no interfaces? [ 426.150008][ T6235] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 426.162887][ T6235] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.163178][ T5853] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 426.253880][ T6235] usb 7-1: config 0 descriptor?? [ 426.263449][ T7] usb 5-1: config 0 has no interfaces? [ 426.274291][ T7] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 426.368466][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.407174][ T7] usb 5-1: config 0 descriptor?? [ 426.530748][ T7455] loop0: detected capacity change from 0 to 512 [ 426.571726][ T6235] usb 7-1: USB disconnect, device number 4 [ 426.612789][ T5853] usb 3-1: Using ep0 maxpacket: 8 [ 426.640551][ T7455] EXT4-fs (loop0): 1 orphan inode deleted [ 426.675319][ T7455] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 426.690062][ T23] usb 5-1: USB disconnect, device number 4 [ 426.722469][ T7455] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 426.743729][ T5853] usb 3-1: config 0 has no interfaces? [ 426.749238][ T5853] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 426.768520][ T5853] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.791049][ T5853] usb 3-1: config 0 descriptor?? [ 427.132844][ T7465] xt_TPROXY: Can be used only with -p tcp or -p udp [ 427.852445][ T7469] loop6: detected capacity change from 0 to 512 [ 427.879136][ T7448] batman_adv: batadv0: Adding interface: dummy0 [ 427.885585][ T7448] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.912918][ T7448] batman_adv: batadv0: Interface activated: dummy0 [ 427.938098][ T7448] batadv0: mtu less than device minimum [ 427.990423][ T7448] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 428.003017][ T7448] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 428.015619][ T7448] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 428.028303][ T7448] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 428.040831][ T7448] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 428.053434][ T7448] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 428.894427][ T7481] netlink: 34 bytes leftover after parsing attributes in process `syz.0.660'. [ 429.657469][ T7472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.661'. [ 429.734299][ T7469] EXT4-fs (loop6): 1 orphan inode deleted [ 429.814528][ T7469] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 429.842855][ T7469] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 429.886410][ T7488] loop0: detected capacity change from 0 to 512 [ 429.931700][ T7] usb 3-1: USB disconnect, device number 2 [ 431.138158][ T7496] loop1: detected capacity change from 0 to 256 [ 431.651033][ T7488] EXT4-fs (loop0): 1 orphan inode deleted [ 431.662715][ T7488] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 431.722198][ T7488] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 432.122339][ T7516] xt_TPROXY: Can be used only with -p tcp or -p udp [ 434.741256][ T7535] loop1: detected capacity change from 0 to 512 [ 434.813380][ T7537] syz.2.674[7537] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 434.813889][ T7537] syz.2.674[7537] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 434.860787][ T7537] netlink: 'syz.2.674': attribute type 4 has an invalid length. [ 436.717096][ T7535] EXT4-fs (loop1): 1 orphan inode deleted [ 436.731005][ T7542] loop2: detected capacity change from 0 to 512 [ 436.748434][ T7535] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 436.801150][ T7544] loop6: detected capacity change from 0 to 512 [ 436.807797][ T7535] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 436.871962][ T7542] EXT4-fs (loop2): 1 orphan inode deleted [ 436.902698][ T7542] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 436.947571][ T7542] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 437.109414][ T7544] EXT4-fs (loop6): 1 orphan inode deleted [ 437.132790][ T7544] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 437.198230][ T7544] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 437.954301][ T7552] [ 437.956664][ T7552] ====================================================== [ 437.963678][ T7552] WARNING: possible circular locking dependency detected [ 437.970743][ T7552] 5.15.180-syzkaller #0 Not tainted [ 437.975934][ T7552] ------------------------------------------------------ [ 437.982949][ T7552] syz.2.675/7552 is trying to acquire lock: [ 437.988839][ T7552] ffff88806026c840 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x332/0x1c60 [ 437.998363][ T7552] [ 437.998363][ T7552] but task is already holding lock: [ 438.005824][ T7552] ffff888063406208 (&s->s_dquot.dqio_sem){++++}-{3:3}, at: v2_write_dquot+0x12b/0x190 [ 438.015423][ T7552] [ 438.015423][ T7552] which lock already depends on the new lock. [ 438.015423][ T7552] [ 438.025836][ T7552] [ 438.025836][ T7552] the existing dependency chain (in reverse order) is: [ 438.034853][ T7552] [ 438.034853][ T7552] -> #2 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 438.042965][ T7552] down_read+0x44/0x2e0 [ 438.047662][ T7552] v2_read_dquot+0x4a/0x110 [ 438.052704][ T7552] dquot_acquire+0x152/0x520 [ 438.057831][ T7552] ext4_acquire_dquot+0x2d9/0x4a0 [ 438.063424][ T7552] dqget+0x778/0xeb0 [ 438.067854][ T7552] __dquot_initialize+0x328/0xcb0 [ 438.073423][ T7552] ext4_process_orphan+0x54/0x300 [ 438.078982][ T7552] ext4_orphan_cleanup+0xaa9/0x12e0 [ 438.084712][ T7552] ext4_fill_super+0x9288/0x9a00 [ 438.090177][ T7552] mount_bdev+0x287/0x3c0 [ 438.095038][ T7552] legacy_get_tree+0xe6/0x180 [ 438.100251][ T7552] vfs_get_tree+0x88/0x270 [ 438.105229][ T7552] do_new_mount+0x24a/0xa40 [ 438.110263][ T7552] __se_sys_mount+0x2d6/0x3c0 [ 438.115469][ T7552] do_syscall_64+0x4c/0xa0 [ 438.120416][ T7552] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 438.126845][ T7552] [ 438.126845][ T7552] -> #1 (&dquot->dq_lock){+.+.}-{3:3}: [ 438.134624][ T7552] __mutex_lock_common+0x1eb/0x2390 [ 438.140411][ T7552] mutex_lock_nested+0x17/0x20 [ 438.145711][ T7552] dquot_commit+0x5a/0x410 [ 438.150661][ T7552] ext4_write_dquot+0x1f0/0x360 [ 438.156049][ T7552] mark_all_dquot_dirty+0xf9/0x400 [ 438.161693][ T7552] __dquot_free_space+0x7ca/0xb90 [ 438.167244][ T7552] ext4_free_blocks+0x1af5/0x2480 [ 438.172805][ T7552] ext4_ext_remove_space+0x1eaa/0x4390 [ 438.178802][ T7552] ext4_ext_truncate+0x192/0x240 [ 438.184271][ T7552] ext4_truncate+0x9f1/0x10d0 [ 438.189482][ T7552] ext4_evict_inode+0xb43/0x1080 [ 438.194947][ T7552] evict+0x485/0x870 [ 438.199370][ T7552] ext4_orphan_cleanup+0xaa9/0x12e0 [ 438.205094][ T7552] ext4_fill_super+0x9288/0x9a00 [ 438.210563][ T7552] mount_bdev+0x287/0x3c0 [ 438.215418][ T7552] legacy_get_tree+0xe6/0x180 [ 438.220623][ T7552] vfs_get_tree+0x88/0x270 [ 438.225563][ T7552] do_new_mount+0x24a/0xa40 [ 438.230590][ T7552] __se_sys_mount+0x2d6/0x3c0 [ 438.235791][ T7552] do_syscall_64+0x4c/0xa0 [ 438.240733][ T7552] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 438.247151][ T7552] [ 438.247151][ T7552] -> #0 (&ei->i_data_sem/2){++++}-{3:3}: [ 438.254993][ T7552] __lock_acquire+0x2c33/0x7c60 [ 438.260509][ T7552] lock_acquire+0x197/0x3f0 [ 438.265536][ T7552] down_read+0x44/0x2e0 [ 438.270217][ T7552] ext4_map_blocks+0x332/0x1c60 [ 438.275599][ T7552] ext4_getblk+0x16d/0x630 [ 438.280545][ T7552] ext4_bread+0x26/0x180 [ 438.285314][ T7552] ext4_quota_write+0x230/0x570 [ 438.290700][ T7552] get_free_dqblk+0x387/0x7d0 [ 438.295908][ T7552] do_insert_tree+0xc9a/0x1970 [ 438.301202][ T7552] do_insert_tree+0x5b1/0x1970 [ 438.306492][ T7552] do_insert_tree+0x5b1/0x1970 [ 438.311783][ T7552] do_insert_tree+0x5b1/0x1970 [ 438.317075][ T7552] qtree_write_dquot+0x361/0x4b0 [ 438.322540][ T7552] v2_write_dquot+0x108/0x190 [ 438.327746][ T7552] dquot_acquire+0x2d5/0x520 [ 438.332886][ T7552] ext4_acquire_dquot+0x2d9/0x4a0 [ 438.338445][ T7552] dqget+0x778/0xeb0 [ 438.342865][ T7552] __dquot_initialize+0x328/0xcb0 [ 438.348429][ T7552] ext4_create+0x8c/0x460 [ 438.353288][ T7552] path_openat+0x11e1/0x2f30 [ 438.358416][ T7552] do_filp_open+0x1b3/0x3e0 [ 438.363449][ T7552] do_sys_openat2+0x142/0x4a0 [ 438.368663][ T7552] __x64_sys_open+0x11b/0x140 [ 438.373863][ T7552] do_syscall_64+0x4c/0xa0 [ 438.378802][ T7552] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 438.385216][ T7552] [ 438.385216][ T7552] other info that might help us debug this: [ 438.385216][ T7552] [ 438.395531][ T7552] Chain exists of: [ 438.395531][ T7552] &ei->i_data_sem/2 --> &dquot->dq_lock --> &s->s_dquot.dqio_sem [ 438.395531][ T7552] [ 438.409167][ T7552] Possible unsafe locking scenario: [ 438.409167][ T7552] [ 438.416607][ T7552] CPU0 CPU1 [ 438.421961][ T7552] ---- ---- [ 438.427309][ T7552] lock(&s->s_dquot.dqio_sem); [ 438.432149][ T7552] lock(&dquot->dq_lock); [ 438.439079][ T7552] lock(&s->s_dquot.dqio_sem); [ 438.446436][ T7552] lock(&ei->i_data_sem/2); [ 438.451021][ T7552] [ 438.451021][ T7552] *** DEADLOCK *** [ 438.451021][ T7552] [ 438.459145][ T7552] 4 locks held by syz.2.675/7552: [ 438.464152][ T7552] #0: ffff888063406460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 438.473289][ T7552] #1: ffff88806026b5c8 (&type->i_mutex_dir_key#4){++++}-{3:3}, at: path_openat+0x7f3/0x2f30 [ 438.483467][ T7552] #2: ffff88806029cb28 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_acquire+0x63/0x520 [ 438.492866][ T7552] #3: ffff888063406208 (&s->s_dquot.dqio_sem){++++}-{3:3}, at: v2_write_dquot+0x12b/0x190 [ 438.502862][ T7552] [ 438.502862][ T7552] stack backtrace: [ 438.508748][ T7552] CPU: 0 PID: 7552 Comm: syz.2.675 Not tainted 5.15.180-syzkaller #0 [ 438.516803][ T7552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 438.526858][ T7552] Call Trace: [ 438.530128][ T7552] [ 438.533049][ T7552] dump_stack_lvl+0x168/0x230 [ 438.537727][ T7552] ? load_image+0x3b0/0x3b0 [ 438.542233][ T7552] ? show_regs_print_info+0x20/0x20 [ 438.547450][ T7552] ? print_circular_bug+0x12b/0x1a0 [ 438.552639][ T7552] check_noncircular+0x274/0x310 [ 438.557568][ T7552] ? add_chain_block+0x940/0x940 [ 438.562498][ T7552] ? lockdep_lock+0xdc/0x1e0 [ 438.567094][ T7552] ? mark_lock+0x94/0x320 [ 438.571414][ T7552] ? mark_lock+0x94/0x320 [ 438.575736][ T7552] __lock_acquire+0x2c33/0x7c60 [ 438.580582][ T7552] ? __lock_acquire+0x13ad/0x7c60 [ 438.585683][ T7552] ? verify_lock_unused+0x140/0x140 [ 438.590868][ T7552] ? verify_lock_unused+0x140/0x140 [ 438.596067][ T7552] lock_acquire+0x197/0x3f0 [ 438.600572][ T7552] ? ext4_map_blocks+0x332/0x1c60 [ 438.605697][ T7552] ? __might_sleep+0xf0/0xf0 [ 438.610621][ T7552] ? read_lock_is_recursive+0x10/0x10 [ 438.615983][ T7552] ? rcu_is_watching+0x11/0xa0 [ 438.620732][ T7552] down_read+0x44/0x2e0 [ 438.624877][ T7552] ? ext4_map_blocks+0x332/0x1c60 [ 438.629894][ T7552] ext4_map_blocks+0x332/0x1c60 [ 438.634742][ T7552] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 438.640631][ T7552] ? _raw_spin_unlock+0x40/0x40 [ 438.645476][ T7552] ? ext4_issue_zeroout+0x250/0x250 [ 438.650661][ T7552] ? stack_trace_save+0x98/0xe0 [ 438.655501][ T7552] ? stack_depot_save+0x404/0x440 [ 438.660521][ T7552] ext4_getblk+0x16d/0x630 [ 438.664930][ T7552] ? do_insert_tree+0xc9a/0x1970 [ 438.669857][ T7552] ? do_insert_tree+0x5b1/0x1970 [ 438.674781][ T7552] ? do_insert_tree+0x5b1/0x1970 [ 438.679708][ T7552] ? ext4_get_block_unwritten+0x30/0x30 [ 438.685248][ T7552] ? path_openat+0x11e1/0x2f30 [ 438.690006][ T7552] ? do_syscall_64+0x4c/0xa0 [ 438.694587][ T7552] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 438.700657][ T7552] ext4_bread+0x26/0x180 [ 438.704894][ T7552] ext4_quota_write+0x230/0x570 [ 438.709743][ T7552] ? ext4_quota_read+0x3a0/0x3a0 [ 438.714677][ T7552] get_free_dqblk+0x387/0x7d0 [ 438.719344][ T7552] ? ext4_quota_read+0x3a0/0x3a0 [ 438.724273][ T7552] do_insert_tree+0xc9a/0x1970 [ 438.729052][ T7552] do_insert_tree+0x5b1/0x1970 [ 438.733811][ T7552] do_insert_tree+0x5b1/0x1970 [ 438.738578][ T7552] do_insert_tree+0x5b1/0x1970 [ 438.743363][ T7552] qtree_write_dquot+0x361/0x4b0 [ 438.748299][ T7552] v2_write_dquot+0x108/0x190 [ 438.752967][ T7552] dquot_acquire+0x2d5/0x520 [ 438.757561][ T7552] ext4_acquire_dquot+0x2d9/0x4a0 [ 438.762586][ T7552] dqget+0x778/0xeb0 [ 438.766475][ T7552] __dquot_initialize+0x328/0xcb0 [ 438.771587][ T7552] ? dquot_initialize+0x20/0x20 [ 438.776435][ T7552] ? common_perm+0x15d/0x1b0 [ 438.781026][ T7552] ext4_create+0x8c/0x460 [ 438.785354][ T7552] ? ext4_lookup+0x840/0x840 [ 438.789942][ T7552] ? inode_permission+0xef/0x480 [ 438.794870][ T7552] ? bpf_lsm_inode_create+0x5/0x10 [ 438.799972][ T7552] ? security_inode_create+0xb3/0x100 [ 438.805336][ T7552] ? ext4_lookup+0x840/0x840 [ 438.810005][ T7552] path_openat+0x11e1/0x2f30 [ 438.814614][ T7552] ? do_filp_open+0x3e0/0x3e0 [ 438.819321][ T7552] do_filp_open+0x1b3/0x3e0 [ 438.823836][ T7552] ? vfs_tmpfile+0x300/0x300 [ 438.828437][ T7552] ? _raw_spin_unlock+0x24/0x40 [ 438.833284][ T7552] ? alloc_fd+0x598/0x630 [ 438.837610][ T7552] do_sys_openat2+0x142/0x4a0 [ 438.842281][ T7552] ? do_sys_open+0xe0/0xe0 [ 438.846695][ T7552] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 438.852712][ T7552] ? lock_chain_count+0x20/0x20 [ 438.857558][ T7552] ? vtime_user_exit+0x2dc/0x400 [ 438.862491][ T7552] __x64_sys_open+0x11b/0x140 [ 438.867168][ T7552] do_syscall_64+0x4c/0xa0 [ 438.871580][ T7552] ? clear_bhb_loop+0x15/0x70 [ 438.876262][ T7552] ? clear_bhb_loop+0x15/0x70 [ 438.880929][ T7552] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 438.886854][ T7552] RIP: 0033:0x7f4d7cc19969 [ 438.891262][ T7552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 438.910858][ T7552] RSP: 002b:00007f4d7aa3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 438.919269][ T7552] RAX: ffffffffffffffda RBX: 00007f4d7ce41160 RCX: 00007f4d7cc19969 [ 438.927228][ T7552] RDX: 0000000000000044 RSI: 000000000014927e RDI: 0000200000000300 [ 438.935186][ T7552] RBP: 00007f4d7cc9bab1 R08: 0000000000000000 R09: 0000000000000000 [ 438.943289][ T7552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 438.951260][ T7552] R13: 0000000000000001 R14: 00007f4d7ce41160 R15: 00007ffe4efc51a8 [ 438.959244][ T7552] [ 439.982704][ T7558] xt_TPROXY: Can be used only with -p tcp or -p udp [ 440.458237][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.464592][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.516567][ T7561] loop0: detected capacity change from 0 to 512 [ 440.568370][ T5947] EXT4-fs error (device loop6): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 16 [ 440.585977][ T5947] EXT4-fs error (device loop6): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 16 [ 440.832991][ T7564] loop1: detected capacity change from 0 to 512 [ 440.852098][ T7561] EXT4-fs (loop0): 1 orphan inode deleted [ 440.861312][ T7561] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 440.875764][ T7561] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 440.881278][ T7564] EXT4-fs (loop1): 1 orphan inode deleted [ 440.902735][ T7564] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 440.927833][ T7564] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 441.994862][ T5947] syz-executor (5947) used greatest stack depth: 20256 bytes left [ 443.596511][ T1172] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.649729][ T1172] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.739966][ T1172] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.796808][ T1172] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.671252][ T1172] device hsr_slave_0 left promiscuous mode [ 444.686172][ T1172] device hsr_slave_1 left promiscuous mode [ 444.702700][ T1172] batman_adv: batadv0: Interface deactivated: dummy0 [ 444.709442][ T1172] batman_adv: batadv0: Removing interface: dummy0 [ 444.723596][ T1172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.731135][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.746944][ T1172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.756922][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.766672][ T1172] device veth1_macvtap left promiscuous mode [ 444.775724][ T1172] device veth0_macvtap left promiscuous mode [ 444.781770][ T1172] device veth1_vlan left promiscuous mode [ 444.788077][ T1172] device veth0_vlan left promiscuous mode [ 444.953249][ T1172] team0 (unregistering): Port device team_slave_1 removed [ 444.969323][ T1172] team0 (unregistering): Port device team_slave_0 removed [ 444.981254][ T1172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 444.999589][ T1172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 445.076286][ T1172] bond0 (unregistering): Released all slaves