last executing test programs: 5.882048921s ago: executing program 2 (id=12): r0 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1, 0x0, 0x0, 0x40800}], 0x1, 0x880) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kmem_cache_free\x00', r1, 0x0, 0x3}, 0x39) sendmmsg$inet_sctp(r0, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0, 0x2}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000002002b0388edb6556900"/51, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 5.875448861s ago: executing program 3 (id=13): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000080)={[{@nolazytime}, {}]}, 0x6, 0x4eb, &(0x7f0000000a40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) write$binfmt_script(r0, &(0x7f0000000380), 0x208e24b) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 5.586565213s ago: executing program 1 (id=16): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = gettid() process_vm_writev(r2, 0x0, 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_read_part_table(0x5be, &(0x7f00000005c0)="$eJzs2z9I3GcYB/DnTI5AMmTJlC5NhgwlSyRjbmjCeUmIrVzqElpIaEIIuekCgQs9COigNyjeII4uItzin8nzBidFwVnEwSI4uLQoBcHFK+LbXesfCHw+8PLwvu/37vk9w2/8Bd+0jvi73W5nIqJ97fS/7m3ku5593/Nj8ZeITPwWEb93fvfP0U0mJf7717tpv5n2E+PXW4N7T7ONjZf7914v1jrS/de0bkw2e888HBduKrd0s6+/XBiq5D6sF6rbA2ur3dO7+WLzRa0+8zz75G3KLad6NdVPUYkv8THeRClK8S7K59R/rLH14PB2oTH3/tFBV2t4oTPles4450n7f74z8qpefXx/9tbow8r8SnHnynGu9D/eLgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALt9UbulmX3+5MFTJfVgvVLcH1la7p3fzxeaLWn3mefbJ25RbTvVqqp+iEl/iY7yJUpTiXZTPqf9YY+vB4e1CY+79o4Ou1vBCZ8r1nHHOk/b/fGfkVb36+P7srdGHlfmV4s6V41zp2gU9AAAAAAAAAAAAAAAAAAAAAETEs8JPPxfz3fmITPwaET/89UfH0Xk7fe+eSbm7qW6m84nx663BvafZxsbL/XuvF2t/pvOvad2YbPZe+jCc2r8BAAD//1Z7laY=") 4.287974605s ago: executing program 1 (id=17): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xa, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_read_part_table(0x5c9, &(0x7f0000000880)="$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") 4.218187565s ago: executing program 2 (id=18): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x2, 0xa, 0x42, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbff, [@sadb_x_sec_ctx={0x1, 0x18, 0x8, 0x4}, @sadb_lifetime={0x4, 0x6170af7ad4304b5f, 0x5, 0xffffffffffffffff, 0x0, 0x7}]}, 0x38}}, 0x40) 4.172242345s ago: executing program 0 (id=19): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) socket$key(0xf, 0x3, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=ANY=[@ANYBLOB="38010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000a000200000000000000000048000200656362286369706865725f6e756c6c29"], 0x138}, 0x1, 0xe}, 0x0) 3.989293357s ago: executing program 2 (id=20): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x42) write(r2, &(0x7f0000000140)="f5", 0x5) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000000)='x', 0x1}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x10, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xfffd, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) brk(0x20001000) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, 0x0, 0x0, 0x0, 0x0, 0x24044000}, 0x20008010) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000000), 0xfd, 0x244, &(0x7f0000000680)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") creat(0x0, 0x0) creat(&(0x7f0000002440)='./file0\x00', 0x0) 3.989221056s ago: executing program 3 (id=21): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) 3.896752328s ago: executing program 4 (id=22): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@bridge_setlink={0x34, 0x13, 0xa29, 0x800000, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x34}}, 0x0) 3.860194398s ago: executing program 0 (id=23): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x6}, {0x0, 0xffff}}}, 0x24}}, 0x0) 3.765825049s ago: executing program 1 (id=24): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 3.564284191s ago: executing program 3 (id=25): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x4000000000000003, 0x82}], 0x1, 0x0, &(0x7f0000001100)={r1, r2+10000000}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xf, &(0x7f0000001540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_setup(0x9f37, 0x0) syz_open_dev$vcsu(&(0x7f0000000200), 0x8, 0x4242) 3.56402033s ago: executing program 4 (id=26): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x200, 0x0, 0x0, 0x101}}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000000200)=0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x8040480) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000018c0)={'team0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000000)=ANY=[], 0x40}}, 0x2400c080) r4 = gettid() r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='scsi_dispatch_cmd_error\x00', r5}, 0x18) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$RNDADDENTROPY(r6, 0x40085203, &(0x7f000000fec0)=ANY=[@ANYBLOB="13a18c04cbece8"]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x6}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="050000000000f6004d0f00000000001400000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x100000, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) 3.467960141s ago: executing program 0 (id=27): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x2b, 0x4, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r5, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x20}, [], {}, [], {0x10, 0x7}}, 0x24, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newlink={0x64, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_XDP={0x34, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x2}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r5}, @IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2b2fb5ac4805795c}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x4}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xa}]}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000700)=@newchain={0x12c, 0x64, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x4, 0xb}, {0xfff2, 0xa}, {0x8, 0x9}}, [@f_tcindex={{0xc}, {0x144, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x4, 0x8}}, @TCA_TCINDEX_HASH={0x8, 0x1, 0xa4ed}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x4fbb}, @TCA_TCINDEX_ACT={0xd8, 0x7, [@m_ct={0xd4, 0x0, 0x0, 0x0, {{0x7}, {0x4, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MAX={0x0, 0xe, 0x4e23}, @TCA_CT_LABELS={0x0, 0x7, "ba5f4e71ecbf32b0ec435774d59ebb8e"}]}, {0xaa, 0x6, "37e6f2f2b50d12ce7c79f1a0d424f645546f14068cce664e0e071ac7da40c06c2891778125011352b398d8acf86efa73c648fdeafea07c22599acff40b48b7bf23fb523165e8ca7dfb5a6632dcd91424ef052062ce767686f917c3714d3f40b69eeb4f947009a4a7d63f2ef2cd7a19b8e36999792e27d18b6b9f85764b810ae10f3244031be057a3bf849a0dd7cbf062316fb41fa351d2bbff1c4821c1e61217d220d277f333"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x7}]}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000010) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r6}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000f8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mm_page_alloc\x00', r7}, 0x10) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000500)=@known='security.selinux\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setreuid(0xee00, 0x0) r9 = getpid() r10 = syz_pidfd_open(r9, 0x0) setns(r10, 0x24020000) syz_clone3(&(0x7f00000008c0)={0x17140000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r9], 0x1}, 0x58) 2.727154187s ago: executing program 0 (id=28): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = gettid() process_vm_writev(r2, 0x0, 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_read_part_table(0x5be, &(0x7f00000005c0)="$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") 2.727019737s ago: executing program 1 (id=29): r0 = socket(0x2, 0x80805, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x2, @loopback, 0x2}}}, 0x30) sendmmsg$inet(r0, &(0x7f0000001f80)=[{{&(0x7f00000022c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000002300)="ef", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000200)='~', 0x1}], 0x1}}], 0x2, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0x101, 0x4, 0x1f4bf1ba, 0x0, r2}, 0x10) 2.531932489s ago: executing program 4 (id=30): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x2, 0xa, 0x42, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbff, [@sadb_x_sec_ctx={0x1, 0x18, 0x8, 0x4}, @sadb_lifetime={0x4, 0x6170af7ad4304b5f, 0x5, 0xffffffffffffffff, 0x0, 0x7}]}, 0x38}}, 0x40) 2.531144739s ago: executing program 2 (id=40): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) getcwd(0x0, 0x0) 2.48084542s ago: executing program 3 (id=31): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4084014) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='fscache_active\x00'}, 0x18) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC=r2, @ANYRES8=r0, @ANYRES64=r1, @ANYBLOB="0a3cea4cd5cd8f4e85e3b9b23a71add9754a082940d838f084580a267c6e0048857ed3a4f64911"], 0x50) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4002, &(0x7f0000000000)=0x2, 0x3, 0x0) r3 = io_uring_setup(0x175c, &(0x7f000009df80)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r4, &(0x7f0000000b80)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r5 = syz_open_pts(r4, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000080)={0x8}) dup3(r5, r4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f00000000c0)) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES32=0x0], 0x23c}}, 0x0) 2.34044938s ago: executing program 1 (id=32): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000000000000691089241ea227d9"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000f"], 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1001, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x600, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xf8, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xe4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x52, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x2c, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf8}}, 0x0) 2.184388742s ago: executing program 2 (id=33): r0 = memfd_create(&(0x7f0000000340)='\xff\x00l\x1e\xa00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$addseals(r0, 0x409, 0xd) 1.307221769s ago: executing program 0 (id=34): pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d00)='kfree\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) 1.292484059s ago: executing program 4 (id=35): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) 1.084429971s ago: executing program 3 (id=36): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@bridge_setlink={0x34, 0x13, 0xa29, 0x800000, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x34}}, 0x0) 1.082407371s ago: executing program 4 (id=37): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x48, 0x30, 0x25, 0x0, 0x0, {}, [{0x34, 0x1, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc, 0x7, {0xd49def1a322ef6fd}}, {0xc}}}]}]}, 0x48}}, 0x0) 245.693168ms ago: executing program 3 (id=38): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x4c2, &(0x7f0000000900)="$eJzs3d9rW1UcAPCTZO3arrofimwT3GDC/MGS/kDWqi8+qQ8DceCLwqxtVmfTpjTpXMtgm77twQdRHIgPvvsX+OKeHIL4rA++iQ8y0VlBBSFyb5L+TNIibTJyPx/Ics49Wb7nEL4nN+fe2xuAxDoZ/ZMKYTCE8F0I4WC1uvEFJ6tPK/euTkaPVKhUzv+Wil8X1esvrf+/AyGE6yGEvhDCqy+G8FZqa9zS0vLMRKGQX6jVc+XZ+VxpafnMpdmJ6fx0fm547Oz4+NjQ6Mj4ro315gfv3Dz35cu9X/z1/t07H379VdStwVrb+nHspurQe8Lhddv2hRCe34tgHZCpjae/0x3hf4k+v4dCCKfi/D8YMvGn2cqPbeoZsNcqlUrl38r+Jq2puB3oTul4HziVzoYQquV0Oput7sM/HAbShWKp/PTF4uLcVHVf+VDoSV+8VMgP1X4rHAo9qag+HJfX6iOb6qMhxPvAH2X643p2sliYavNcB2x0YFP+/5mp5j+QENv95Ae6l/yH5JL/kFzyH5Irzv9mxwCBrub7H5JL/kNyyX9Iru3yv8H1O0CX8P0PySX/IZFeOXcuelTq179PXV5anClePjOVL81kZxcns5PFhfnsdLE4HV+zM9v4XdZ+IBSKxfnhZ8LilVw5XyrnSkvLF2aLi3PlC/F1/RfyPW0bGbCdwydu/xBl7/Vn++NHpLfWJlehu1UqrvGHpMp0egICOsbSHySX3/jAdqf49DVrmN/9vgDtke50B4COOX3M8T9IKuv/kFzW/yG57OMD1v8heaz/Q3INNrn/1wPr7t01FEJ4MITwfaZnf/1eX0A3SP+Squ7/T58++Pjg5tbe1N/xIYLeEMK7n57/5MpEubwwHG3/fXV7+VZt+0gn+g/sVD1P63kMACTXyr2rk/VHO+P++kL1JISt8ffV1ib74mOUAyupDecqpHbp3IXrN0IIRxvFT9Xud1498jGwktkS/0jtOVV9i7i/++L7prcn/rF18R9bF/94s2Bu8QIb3I7mn6FG+ZeOczqs5t/G+Wdwl86daD7/pVfnv0yT+e/EDmO8/dl7PzeNfyOE4w3j1+P1xbE2x4/6dnq1dq1l/LtvvPZIs7bK59X3aRS/LirlyrPzudLS8pn478hN5+eGx86Oj48NjY6M5+I16lx9pXqr545+e6fV+AeaxG81/mjbky1HveafR795/WSL+E+cavz5H2kRvz+E8NQO4/8x8tObzdqi+FNNxp9uET/aNrrD+KWPX/LNAwD3kdLS8sxEoZBf2LZwK2z/GgWFdhSu3R/d6OpCp2cmYK+tJX2newIAAAAAAAAAAADsVDtOJ+70GAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAusF/AQAA//8Jdtd8") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0900000004000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98d, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) 243.179148ms ago: executing program 2 (id=39): syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x2c) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000780)=ANY=[@ANYBLOB="000000004c90020000000000030001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00"/137]) 340.08µs ago: executing program 0 (id=41): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x200, 0x0, 0x0, 0x101}}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000000200)=0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x8040480) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000018c0)={'team0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000000)=ANY=[], 0x40}}, 0x2400c080) r4 = gettid() r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='scsi_dispatch_cmd_error\x00', r5}, 0x18) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$RNDADDENTROPY(r6, 0x40085203, &(0x7f000000fec0)=ANY=[@ANYBLOB="13a18c04cbece8"]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x6}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="050000000000f6004d0f00000000001400000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x100000, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) 106.2µs ago: executing program 1 (id=42): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x8000, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value, @void, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000340)={[{@nogrpid}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@jqfmt_vfsv0}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) creat(&(0x7f0000000140)='./file2\x00', 0x1ad) unlink(&(0x7f0000000180)='./file1\x00') 0s ago: executing program 4 (id=43): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.27' (ED25519) to the list of known hosts. syzkaller login: [ 67.524313][ T4238] cgroup: Unknown subsys name 'net' [ 67.661314][ T4238] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.150555][ T4238] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 70.604517][ T4261] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.613179][ T4261] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.618722][ T4262] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.627911][ T4262] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.636344][ T4265] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.637212][ T4262] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.643915][ T4265] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.651008][ T4262] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.658406][ T4265] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.665807][ T4262] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.672262][ T4265] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.679132][ T4262] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.685723][ T4265] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.699563][ T4262] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.707914][ T4266] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.708247][ T4262] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.715237][ T4266] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.722082][ T4262] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.735458][ T4266] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.743451][ T4262] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.745058][ T4266] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 70.750774][ T4262] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.758349][ T4266] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.764927][ T4262] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.772754][ T4266] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.778995][ T4262] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.787830][ T4266] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.837740][ T4262] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.848864][ T4252] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.857163][ T4252] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.157508][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.164014][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.214835][ T4263] chnl_net:caif_netlink_parms(): no params data found [ 71.332712][ T4249] chnl_net:caif_netlink_parms(): no params data found [ 71.399627][ T4263] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.407349][ T4263] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.416346][ T4263] device bridge_slave_0 entered promiscuous mode [ 71.448639][ T4263] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.456026][ T4263] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.464622][ T4263] device bridge_slave_1 entered promiscuous mode [ 71.489987][ T4251] chnl_net:caif_netlink_parms(): no params data found [ 71.516669][ T4255] chnl_net:caif_netlink_parms(): no params data found [ 71.549749][ T4263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.562213][ T4263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.575340][ T4250] chnl_net:caif_netlink_parms(): no params data found [ 71.597491][ T4249] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.608179][ T4249] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.616432][ T4249] device bridge_slave_0 entered promiscuous mode [ 71.655769][ T4263] team0: Port device team_slave_0 added [ 71.671635][ T4249] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.678821][ T4249] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.687200][ T4249] device bridge_slave_1 entered promiscuous mode [ 71.716945][ T4263] team0: Port device team_slave_1 added [ 71.779627][ T4251] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.787086][ T4251] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.795326][ T4251] device bridge_slave_0 entered promiscuous mode [ 71.804966][ T4249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.834797][ T4251] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.841935][ T4251] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.853199][ T4251] device bridge_slave_1 entered promiscuous mode [ 71.861937][ T4249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.878544][ T4263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.885774][ T4263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.911917][ T4263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.951811][ T4263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.959038][ T4263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.985624][ T4263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.997141][ T4255] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.004459][ T4255] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.012453][ T4255] device bridge_slave_0 entered promiscuous mode [ 72.033829][ T4249] team0: Port device team_slave_0 added [ 72.045258][ T4255] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.052356][ T4255] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.060361][ T4255] device bridge_slave_1 entered promiscuous mode [ 72.075858][ T4251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.087059][ T4249] team0: Port device team_slave_1 added [ 72.094540][ T4251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.158526][ T4250] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.166114][ T4250] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.173863][ T4250] device bridge_slave_0 entered promiscuous mode [ 72.192924][ T4251] team0: Port device team_slave_0 added [ 72.207776][ T4255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.218648][ T4250] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.226138][ T4250] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.233967][ T4250] device bridge_slave_1 entered promiscuous mode [ 72.241778][ T4249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.251847][ T4249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.283519][ T4249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.305366][ T4263] device hsr_slave_0 entered promiscuous mode [ 72.312815][ T4263] device hsr_slave_1 entered promiscuous mode [ 72.320665][ T4251] team0: Port device team_slave_1 added [ 72.327963][ T4255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.345976][ T4249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.352912][ T4249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.379088][ T4249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.459130][ T4250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.484539][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.491520][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.517635][ T4251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.531468][ T4255] team0: Port device team_slave_0 added [ 72.541985][ T4250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.564635][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.571592][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.598361][ T4251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.610579][ T4255] team0: Port device team_slave_1 added [ 72.627111][ T4249] device hsr_slave_0 entered promiscuous mode [ 72.633732][ T4249] device hsr_slave_1 entered promiscuous mode [ 72.641382][ T4249] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.649283][ T4249] Cannot create hsr debugfs directory [ 72.715145][ T4250] team0: Port device team_slave_0 added [ 72.739388][ T4255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.750165][ T4255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.776545][ T4255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.799584][ T4250] team0: Port device team_slave_1 added [ 72.816831][ T4251] device hsr_slave_0 entered promiscuous mode [ 72.824587][ T4251] device hsr_slave_1 entered promiscuous mode [ 72.831286][ T4251] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.839286][ T4257] Bluetooth: hci0: command 0x0409 tx timeout [ 72.839295][ T4251] Cannot create hsr debugfs directory [ 72.851525][ T48] Bluetooth: hci4: command 0x0409 tx timeout [ 72.851939][ T4255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.866034][ T4255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.892157][ T4255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.914395][ T48] Bluetooth: hci2: command 0x0409 tx timeout [ 72.917764][ T4257] Bluetooth: hci1: command 0x0409 tx timeout [ 72.921227][ T4252] Bluetooth: hci3: command 0x0409 tx timeout [ 72.978885][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.992801][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.019130][ T4250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.076138][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.083114][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.109215][ T4250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.122924][ T4255] device hsr_slave_0 entered promiscuous mode [ 73.130251][ T4255] device hsr_slave_1 entered promiscuous mode [ 73.137172][ T4255] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.144873][ T4255] Cannot create hsr debugfs directory [ 73.248299][ T4250] device hsr_slave_0 entered promiscuous mode [ 73.255204][ T4250] device hsr_slave_1 entered promiscuous mode [ 73.261815][ T4250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.269504][ T4250] Cannot create hsr debugfs directory [ 73.300825][ T4263] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.354925][ T4263] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.387961][ T4263] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.422523][ T4263] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.513994][ T4249] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.538405][ T4249] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.559729][ T4249] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.582734][ T4249] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.627720][ T4251] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.639462][ T4251] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.653412][ T4251] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.671779][ T4251] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.746767][ T4250] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.758762][ T4250] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.788621][ T4250] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.813469][ T4250] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.838565][ T4263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.859166][ T4255] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.868997][ T4255] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.898375][ T4255] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.907788][ T4255] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.919488][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.929492][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.947319][ T4263] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.973328][ T4249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.001554][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.011034][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.052460][ T4249] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.059912][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.070604][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.080720][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.088141][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.097654][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.116964][ T4251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.126428][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.138554][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.147671][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.154831][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.188140][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.197771][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.208358][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.215505][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.223520][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.234764][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.243366][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.251942][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.259049][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.268584][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.289199][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.297505][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.307870][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.326793][ T4251] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.339916][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.349779][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.359461][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.370023][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.379774][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.418051][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.427825][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.437903][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.445047][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.452967][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.462622][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.471455][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.478593][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.486876][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.496273][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.505074][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.513673][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.522870][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.532037][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.540735][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.568848][ T4249] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.579608][ T4249] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.611671][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.620682][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.629779][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.638886][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.649005][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.657670][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.666724][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.676056][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.685394][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.693791][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.702680][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.711226][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.719648][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.728398][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.736877][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.751736][ T4250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.769868][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.778735][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.792663][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.802024][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.823624][ T4255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.847929][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.863405][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.880286][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.892511][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.914378][ T4252] Bluetooth: hci4: command 0x041b tx timeout [ 74.914450][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 74.930643][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.939679][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.962248][ T4255] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.985950][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.994812][ T4257] Bluetooth: hci2: command 0x041b tx timeout [ 74.995013][ T48] Bluetooth: hci1: command 0x041b tx timeout [ 75.000817][ T4257] Bluetooth: hci3: command 0x041b tx timeout [ 75.040896][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.061958][ T4250] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.081940][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.091476][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.100398][ T4305] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.107575][ T4305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.134731][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.154780][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.165069][ T4305] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.172190][ T4305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.191962][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.214887][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.236015][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.254559][ T4305] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.261637][ T4305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.269689][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.280786][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.289663][ T4305] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.296820][ T4305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.306655][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.348132][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.362818][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.379999][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.390344][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.417340][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.433361][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.472681][ T4249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.491718][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.501509][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.511420][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.519455][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.529107][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.557697][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.568597][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.578196][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.586960][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.596024][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.604778][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.613026][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.621507][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.630178][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.659087][ T4263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.668649][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.683222][ T4250] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.694786][ T4250] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.711541][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.727191][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.743055][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.752056][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.766942][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.778240][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.792397][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.801059][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.809105][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.832653][ T4251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.879797][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.892847][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.952271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.977310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.028749][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.048680][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.092685][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.101773][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.131817][ T4249] device veth0_vlan entered promiscuous mode [ 76.157647][ T4263] device veth0_vlan entered promiscuous mode [ 76.174574][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.185696][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.196984][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.211750][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.220054][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.233478][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.257232][ T4249] device veth1_vlan entered promiscuous mode [ 76.281395][ T4263] device veth1_vlan entered promiscuous mode [ 76.308965][ T4250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.362622][ T4263] device veth0_macvtap entered promiscuous mode [ 76.378539][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.387892][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.396845][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.405682][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.413953][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.423397][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.433300][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.467147][ T4263] device veth1_macvtap entered promiscuous mode [ 76.476534][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.486308][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.495796][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.506230][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.525819][ T4249] device veth0_macvtap entered promiscuous mode [ 76.551804][ T4250] device veth0_vlan entered promiscuous mode [ 76.561119][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.570271][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.579917][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.588828][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.597770][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.608180][ T4249] device veth1_macvtap entered promiscuous mode [ 76.618141][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.631005][ T4255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.645006][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.653245][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.661299][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.670189][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.679691][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.697732][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.706307][ T4250] device veth1_vlan entered promiscuous mode [ 76.718403][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.730174][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.739851][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.748947][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.758739][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.767502][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.790195][ T4263] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.799249][ T4263] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.809189][ T4263] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.818295][ T4263] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.846160][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.860035][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.871714][ T4251] device veth0_vlan entered promiscuous mode [ 76.899473][ T4250] device veth0_macvtap entered promiscuous mode [ 76.907467][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.916531][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.924878][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.933353][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.947598][ T4251] device veth1_vlan entered promiscuous mode [ 76.971208][ T4250] device veth1_macvtap entered promiscuous mode [ 76.979413][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.988204][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.994409][ T4257] Bluetooth: hci0: command 0x040f tx timeout [ 76.996479][ T4252] Bluetooth: hci4: command 0x040f tx timeout [ 77.005846][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.016845][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.024982][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.033630][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.045357][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.056405][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.067818][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.075477][ T4257] Bluetooth: hci1: command 0x040f tx timeout [ 77.075517][ T4257] Bluetooth: hci2: command 0x040f tx timeout [ 77.085166][ T4252] Bluetooth: hci3: command 0x040f tx timeout [ 77.121211][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.131647][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.149721][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.166064][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.177676][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.192930][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.209315][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.222742][ T4251] device veth0_macvtap entered promiscuous mode [ 77.239963][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.254526][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.266353][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.273951][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.289231][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.299249][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.310443][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.323364][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.333725][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.343844][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.352942][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.361743][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.370517][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.379766][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.388603][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.397687][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.407227][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.416359][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.425749][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.433518][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.442094][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.470831][ T4251] device veth1_macvtap entered promiscuous mode [ 77.481901][ T4255] device veth0_vlan entered promiscuous mode [ 77.496233][ T4250] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.509170][ T4250] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.518322][ T4250] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.527888][ T4250] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.550111][ T4249] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.561250][ T4249] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.570391][ T4249] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.579155][ T4249] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.600357][ T4255] device veth1_vlan entered promiscuous mode [ 77.647296][ T4305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.668843][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.683444][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.683487][ T4305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.694027][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.711965][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.722815][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.733306][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.748242][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.773919][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.787438][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.800372][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.821205][ T4255] device veth0_macvtap entered promiscuous mode [ 77.841633][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.857301][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.867465][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.878853][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.889102][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.899568][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.910629][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.927889][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.937221][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.946269][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.955682][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.964828][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.976338][ T4255] device veth1_macvtap entered promiscuous mode [ 77.996205][ T4251] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.006483][ T4251] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.019768][ T4251] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.028876][ T4251] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.045622][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.054395][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.072718][ T4305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.087972][ T4305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.119381][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.133925][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.142450][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.200658][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.223139][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.235537][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.250187][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.261686][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.283228][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.301410][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.312857][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.329289][ T4333] loop3: detected capacity change from 0 to 128 [ 78.334193][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.364360][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.387298][ T4255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.408700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.421948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.433132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.452088][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.463259][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.473430][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.484486][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.495763][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.506320][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.518172][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.529815][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.541663][ T4255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.563201][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.570568][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.582638][ T4334] syz.3.4: attempt to access beyond end of device [ 78.582638][ T4334] loop3: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 78.587957][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.597867][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.614675][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.627803][ T4255] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.642630][ T4255] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.652350][ T4255] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.666487][ T4255] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.740329][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.752198][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.767948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.787723][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.814496][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.847575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.926763][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.943253][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.964264][ T4337] capability: warning: `syz.0.1' uses deprecated v2 capabilities in a way that may be insecure [ 79.036995][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.064908][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.074821][ T4257] Bluetooth: hci0: command 0x0419 tx timeout [ 79.077710][ T4252] Bluetooth: hci4: command 0x0419 tx timeout [ 79.093046][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.109031][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.151439][ T4331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.165218][ T4252] Bluetooth: hci3: command 0x0419 tx timeout [ 79.165237][ T4257] Bluetooth: hci2: command 0x0419 tx timeout [ 79.171272][ T4252] Bluetooth: hci1: command 0x0419 tx timeout [ 79.210988][ T4331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.252516][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.295973][ T4345] loop3: detected capacity change from 0 to 128 [ 79.391871][ T4345] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 79.449780][ T4345] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 79.941715][ T4263] EXT4-fs (loop3): unmounting filesystem. [ 79.972056][ T4356] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.979829][ T4356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.043500][ T4355] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3'. [ 80.330757][ T4368] loop3: detected capacity change from 0 to 512 [ 80.372379][ T4370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11'. [ 80.393440][ T4374] syz.2.12[4374] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.393544][ T4374] syz.2.12[4374] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.418671][ T4368] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 80.427559][ T4372] loop0: detected capacity change from 0 to 128 [ 80.449767][ T4368] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.469803][ T4370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11'. [ 80.539048][ T4370] netlink: 2 bytes leftover after parsing attributes in process `syz.4.11'. [ 80.704024][ T27] audit: type=1800 audit(1733587282.887:2): pid=4372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.14" name="bus" dev="loop0" ino=1048596 res=0 errno=0 [ 80.982183][ T4384] loop1: detected capacity change from 0 to 2048 [ 81.655844][ T26] cfg80211: failed to load regulatory.db [ 81.709554][ T3623] Alternate GPT is invalid, using primary GPT. [ 81.727382][ T3623] loop1: p1 p2 p3 [ 82.034003][ T4386] loop1: detected capacity change from 0 to 2048 [ 82.056679][ T4329] udevd[4329]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 82.101942][ T4263] EXT4-fs (loop3): unmounting filesystem. [ 82.143617][ T4391] udevd[4391]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 82.153281][ T4329] udevd[4329]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 82.385206][ T4399] netlink: 24 bytes leftover after parsing attributes in process `syz.0.23'. [ 82.394765][ T4329] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 82.679003][ T4408] loop2: detected capacity change from 0 to 128 [ 82.686437][ T27] audit: type=1326 audit(1733587284.877:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4409 comm="syz.3.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9337fed9 code=0x7ffc0000 [ 82.711289][ T27] audit: type=1326 audit(1733587284.897:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4409 comm="syz.3.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9337fed9 code=0x7ffc0000 [ 82.722052][ T27] audit: type=1326 audit(1733587284.907:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4409 comm="syz.3.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa9337fed9 code=0x7ffc0000 [ 82.722665][ T27] audit: type=1326 audit(1733587284.907:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4409 comm="syz.3.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9337fed9 code=0x7ffc0000 [ 82.722853][ T27] audit: type=1326 audit(1733587284.907:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4409 comm="syz.3.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9337fed9 code=0x7ffc0000 [ 82.723439][ T27] audit: type=1326 audit(1733587284.907:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4409 comm="syz.3.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa9337fed9 code=0x7ffc0000 [ 82.723620][ T27] audit: type=1326 audit(1733587284.907:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4409 comm="syz.3.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9337fed9 code=0x7ffc0000 [ 82.723798][ T27] audit: type=1326 audit(1733587284.907:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4409 comm="syz.3.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9337fed9 code=0x7ffc0000 [ 82.724050][ T27] audit: type=1326 audit(1733587284.907:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4409 comm="syz.3.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7ffa9337fed9 code=0x7ffc0000 [ 82.877742][ T4408] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 82.900547][ T4408] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 83.445815][ T4255] EXT4-fs (loop2): unmounting filesystem. [ 84.011184][ T4432] loop0: detected capacity change from 0 to 2048 [ 84.144997][ T4432] Alternate GPT is invalid, using primary GPT. [ 84.151586][ T4432] loop0: p1 p2 p3 [ 84.884570][ T4329] udevd[4329]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 85.135094][ T4431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.32'. [ 85.319801][ T4329] udevd[4329]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 85.538344][ T4431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.32'. [ 85.655183][ T4329] udevd[4329]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 85.775826][ T4431] netlink: 2 bytes leftover after parsing attributes in process `syz.1.32'. [ 85.923010][ T4453] loop2: detected capacity change from 0 to 512 [ 85.929915][ T4453] EXT4-fs: Ignoring removed oldalloc option [ 85.937090][ T4453] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 86.000970][ T4453] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 86.053700][ T4453] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2809: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 86.094761][ T4453] EXT4-fs (loop2): 1 truncate cleaned up [ 86.110618][ T4456] loop3: detected capacity change from 0 to 512 [ 86.112288][ T4453] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 86.142533][ T4459] loop1: detected capacity change from 0 to 512 [ 86.167402][ T4459] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 86.205430][ T4459] EXT4-fs (loop1): 1 truncate cleaned up [ 86.211191][ T4459] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 86.229992][ T4456] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 86.244311][ T4456] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.265981][ T4459] ================================================================== [ 86.274083][ T4459] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x8ca/0x1f30 [ 86.281861][ T4459] Read of size 18446744073709551572 at addr ffff8880794bc050 by task syz.1.42/4459 [ 86.291164][ T4459] [ 86.293533][ T4459] CPU: 1 PID: 4459 Comm: syz.1.42 Not tainted 6.1.119-syzkaller #0 [ 86.301448][ T4459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 86.311558][ T4459] Call Trace: [ 86.314869][ T4459] [ 86.317818][ T4459] dump_stack_lvl+0x1e3/0x2cb [ 86.322534][ T4459] ? nf_tcp_handle_invalid+0x642/0x642 [ 86.328027][ T4459] ? panic+0x764/0x764 [ 86.332121][ T4459] ? _printk+0xd1/0x111 [ 86.336301][ T4459] ? __virt_addr_valid+0x17f/0x530 [ 86.341457][ T4459] ? __virt_addr_valid+0x17f/0x530 [ 86.346604][ T4459] print_report+0x15f/0x4f0 [ 86.351134][ T4459] ? __virt_addr_valid+0x17f/0x530 [ 86.356284][ T4459] ? __virt_addr_valid+0x17f/0x530 [ 86.361427][ T4459] ? __virt_addr_valid+0x45b/0x530 [ 86.366570][ T4459] ? __phys_addr+0xb6/0x170 [ 86.371114][ T4459] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 86.376600][ T4459] kasan_report+0x136/0x160 [ 86.381127][ T4459] ? __x64_sys_unlink+0x45/0x50 [ 86.386020][ T4459] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 86.391510][ T4459] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 86.396995][ T4459] kasan_check_range+0x27f/0x290 [ 86.401955][ T4459] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 86.407444][ T4459] memmove+0x25/0x60 [ 86.411369][ T4459] ext4_xattr_set_entry+0x8ca/0x1f30 [ 86.416693][ T4459] ? ext4_xattr_inode_lookup_create+0x1ef0/0x1ef0 [ 86.423157][ T4459] ? ext4_xattr_block_set+0x884/0x3920 [ 86.428648][ T4459] ? kmemdup+0x41/0x60 [ 86.432748][ T4459] ? memcpy+0x3c/0x60 [ 86.436781][ T4459] ext4_xattr_block_set+0xa58/0x3920 [ 86.442103][ T4459] ? __getblk_gfp+0x50/0xa20 [ 86.446723][ T4459] ? _raw_spin_unlock+0x24/0x40 [ 86.451607][ T4459] ? ext4_xattr_block_find+0x510/0x510 [ 86.457098][ T4459] ? ext4_xattr_block_find+0x468/0x510 [ 86.462588][ T4459] ext4_expand_extra_isize_ea+0x10d5/0x1bb0 [ 86.468521][ T4459] ? ext4_xattr_set+0x3d0/0x3d0 [ 86.473402][ T4459] ? rwsem_write_trylock+0x166/0x210 [ 86.478752][ T4459] ? clear_nonspinnable+0x60/0x60 [ 86.478786][ T4459] ? ext4_reserve_inode_write+0x2b3/0x360 [ 86.478819][ T4459] ? dquot_initialize_needed+0x128/0x320 [ 86.478852][ T4459] __ext4_expand_extra_isize+0x2f7/0x3d0 [ 86.478887][ T4459] __ext4_mark_inode_dirty+0x54f/0x920 [ 86.478918][ T4459] ? ext4_blocks_for_truncate+0x270/0x270 [ 86.478947][ T4459] ? current_time+0x1ba/0x300 [ 86.478982][ T4459] ? atime_needs_update+0x7b0/0x7b0 [ 86.479021][ T4459] __ext4_unlink+0x6ed/0xba0 [ 86.526817][ T4459] ? __ext4_read_dirblock+0x890/0x890 [ 86.532231][ T4459] ? rwsem_write_trylock+0x166/0x210 [ 86.537553][ T4459] ? inode_permission+0xf7/0x450 [ 86.542527][ T4459] ? clear_nonspinnable+0x60/0x60 [ 86.547590][ T4459] ext4_unlink+0x1d5/0x670 [ 86.552051][ T4459] vfs_unlink+0x359/0x5f0 [ 86.556436][ T4459] do_unlinkat+0x4a5/0x820 [ 86.560892][ T4459] ? fsnotify_link_count+0xf0/0xf0 [ 86.566054][ T4459] __x64_sys_unlink+0x45/0x50 [ 86.570764][ T4459] do_syscall_64+0x3b/0xb0 [ 86.575227][ T4459] ? clear_bhb_loop+0x45/0xa0 [ 86.579942][ T4459] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 86.585872][ T4459] RIP: 0033:0x7f35c8d7fed9 [ 86.590321][ T4459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.609968][ T4459] RSP: 002b:00007f35c9b4f058 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 86.618414][ T4459] RAX: ffffffffffffffda RBX: 00007f35c8f45fa0 RCX: 00007f35c8d7fed9 [ 86.626414][ T4459] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 86.634409][ T4459] RBP: 00007f35c8df3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 86.642416][ T4459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.650410][ T4459] R13: 0000000000000000 R14: 00007f35c8f45fa0 R15: 00007fff79678208 [ 86.658417][ T4459] [ 86.661471][ T4459] [ 86.663810][ T4459] Allocated by task 4459: [ 86.668166][ T4459] kasan_set_track+0x4b/0x70 [ 86.672784][ T4459] __kasan_kmalloc+0x97/0xb0 [ 86.677383][ T4459] __kmalloc_node_track_caller+0xb1/0x220 [ 86.683165][ T4459] kmemdup+0x26/0x60 [ 86.687069][ T4459] ext4_xattr_block_set+0x884/0x3920 [ 86.692375][ T4459] ext4_expand_extra_isize_ea+0x10d5/0x1bb0 [ 86.698281][ T4459] __ext4_expand_extra_isize+0x2f7/0x3d0 [ 86.703921][ T4459] __ext4_mark_inode_dirty+0x54f/0x920 [ 86.709380][ T4459] __ext4_unlink+0x6ed/0xba0 [ 86.713988][ T4459] ext4_unlink+0x1d5/0x670 [ 86.718397][ T4459] vfs_unlink+0x359/0x5f0 [ 86.722742][ T4459] do_unlinkat+0x4a5/0x820 [ 86.727187][ T4459] __x64_sys_unlink+0x45/0x50 [ 86.731902][ T4459] do_syscall_64+0x3b/0xb0 [ 86.736378][ T4459] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 86.742318][ T4459] [ 86.744667][ T4459] The buggy address belongs to the object at ffff8880794bc000 [ 86.744667][ T4459] which belongs to the cache kmalloc-1k of size 1024 [ 86.758745][ T4459] The buggy address is located 80 bytes inside of [ 86.758745][ T4459] 1024-byte region [ffff8880794bc000, ffff8880794bc400) [ 86.772032][ T4459] [ 86.774361][ T4459] The buggy address belongs to the physical page: [ 86.780781][ T4459] page:ffffea0001e52e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880794b9000 pfn:0x794b8 [ 86.792250][ T4459] head:ffffea0001e52e00 order:3 compound_mapcount:0 compound_pincount:0 [ 86.800571][ T4459] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 86.808650][ T4459] raw: 00fff00000010200 ffffea0001dda200 dead000000000003 ffff888017c41dc0 [ 86.817249][ T4459] raw: ffff8880794b9000 0000000080100007 00000001ffffffff 0000000000000000 [ 86.825844][ T4459] page dumped because: kasan: bad access detected [ 86.832265][ T4459] page_owner tracks the page as allocated [ 86.837972][ T4459] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4063, tgid 4063 (dhcpcd), ts 46925167467, free_ts 46535236981 [ 86.858805][ T4459] post_alloc_hook+0x18d/0x1b0 [ 86.863595][ T4459] get_page_from_freelist+0x3731/0x38d0 [ 86.869143][ T4459] __alloc_pages+0x28d/0x770 [ 86.873753][ T4459] alloc_slab_page+0x6a/0x150 [ 86.878431][ T4459] new_slab+0x84/0x2d0 [ 86.882498][ T4459] ___slab_alloc+0xc20/0x1270 [ 86.887171][ T4459] __kmem_cache_alloc_node+0x19f/0x260 [ 86.892640][ T4459] __kmalloc_node_track_caller+0xa0/0x220 [ 86.898377][ T4459] kmemdup+0x26/0x60 [ 86.902270][ T4459] bpf_prepare_filter+0xc6b/0x13d0 [ 86.907408][ T4459] bpf_prog_create_from_user+0x2a7/0x3d0 [ 86.913049][ T4459] do_seccomp+0x8ef/0xf70 [ 86.917406][ T4459] __se_sys_prctl+0x473/0x2d40 [ 86.922191][ T4459] do_syscall_64+0x3b/0xb0 [ 86.926609][ T4459] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 86.932503][ T4459] page last free stack trace: [ 86.937184][ T4459] free_unref_page_prepare+0xf63/0x1120 [ 86.942755][ T4459] free_unref_page+0x33/0x3e0 [ 86.947431][ T4459] __unfreeze_partials+0x1b7/0x210 [ 86.952546][ T4459] put_cpu_partial+0x17b/0x250 [ 86.957404][ T4459] qlist_free_all+0x76/0xe0 [ 86.961946][ T4459] kasan_quarantine_reduce+0x156/0x170 [ 86.967405][ T4459] __kasan_slab_alloc+0x1f/0x70 [ 86.972252][ T4459] slab_post_alloc_hook+0x52/0x3a0 [ 86.977385][ T4459] kmem_cache_alloc+0x10c/0x2d0 [ 86.982250][ T4459] getname_flags+0xb8/0x4f0 [ 86.986754][ T4459] __x64_sys_newfstatat+0x130/0x1e0 [ 86.991962][ T4459] do_syscall_64+0x3b/0xb0 [ 86.996392][ T4459] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 87.002310][ T4459] [ 87.004636][ T4459] Memory state around the buggy address: [ 87.010291][ T4459] ffff8880794bbf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 87.018348][ T4459] ffff8880794bbf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 87.026410][ T4459] >ffff8880794bc000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 87.034481][ T4459] ^ [ 87.041178][ T4459] ffff8880794bc080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 87.049232][ T4459] ffff8880794bc100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 87.057292][ T4459] ================================================================== [ 87.077611][ T4459] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 87.084842][ T4459] CPU: 1 PID: 4459 Comm: syz.1.42 Not tainted 6.1.119-syzkaller #0 [ 87.087387][ T4263] EXT4-fs (loop3): unmounting filesystem. [ 87.088524][ T4255] EXT4-fs (loop2): unmounting filesystem. [ 87.104180][ T4459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 87.114234][ T4459] Call Trace: [ 87.117512][ T4459] [ 87.120443][ T4459] dump_stack_lvl+0x1e3/0x2cb [ 87.125148][ T4459] ? nf_tcp_handle_invalid+0x642/0x642 [ 87.130615][ T4459] ? panic+0x764/0x764 [ 87.134683][ T4459] ? preempt_schedule_common+0xa6/0xd0 [ 87.140146][ T4459] ? vscnprintf+0x59/0x80 [ 87.144479][ T4459] panic+0x318/0x764 [ 87.148376][ T4459] ? check_panic_on_warn+0x1d/0xa0 [ 87.153490][ T4459] ? memcpy_page_flushcache+0xfc/0xfc [ 87.158872][ T4459] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 87.164956][ T4459] ? _raw_spin_unlock+0x40/0x40 [ 87.169815][ T4459] check_panic_on_warn+0x7e/0xa0 [ 87.174756][ T4459] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 87.180231][ T4459] end_report+0x66/0x110 [ 87.184474][ T4459] kasan_report+0x143/0x160 [ 87.188974][ T4459] ? __x64_sys_unlink+0x45/0x50 [ 87.194963][ T4459] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 87.200426][ T4459] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 87.205894][ T4459] kasan_check_range+0x27f/0x290 [ 87.210836][ T4459] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 87.216313][ T4459] memmove+0x25/0x60 [ 87.220209][ T4459] ext4_xattr_set_entry+0x8ca/0x1f30 [ 87.225497][ T4459] ? ext4_xattr_inode_lookup_create+0x1ef0/0x1ef0 [ 87.231907][ T4459] ? ext4_xattr_block_set+0x884/0x3920 [ 87.237364][ T4459] ? kmemdup+0x41/0x60 [ 87.241452][ T4459] ? memcpy+0x3c/0x60 [ 87.245442][ T4459] ext4_xattr_block_set+0xa58/0x3920 [ 87.250729][ T4459] ? __getblk_gfp+0x50/0xa20 [ 87.255319][ T4459] ? _raw_spin_unlock+0x24/0x40 [ 87.260197][ T4459] ? ext4_xattr_block_find+0x510/0x510 [ 87.265677][ T4459] ? ext4_xattr_block_find+0x468/0x510 [ 87.271141][ T4459] ext4_expand_extra_isize_ea+0x10d5/0x1bb0 [ 87.277045][ T4459] ? ext4_xattr_set+0x3d0/0x3d0 [ 87.281893][ T4459] ? rwsem_write_trylock+0x166/0x210 [ 87.287185][ T4459] ? clear_nonspinnable+0x60/0x60 [ 87.292216][ T4459] ? ext4_reserve_inode_write+0x2b3/0x360 [ 87.297954][ T4459] ? dquot_initialize_needed+0x128/0x320 [ 87.303775][ T4459] __ext4_expand_extra_isize+0x2f7/0x3d0 [ 87.309422][ T4459] __ext4_mark_inode_dirty+0x54f/0x920 [ 87.314886][ T4459] ? ext4_blocks_for_truncate+0x270/0x270 [ 87.320635][ T4459] ? current_time+0x1ba/0x300 [ 87.325322][ T4459] ? atime_needs_update+0x7b0/0x7b0 [ 87.330531][ T4459] __ext4_unlink+0x6ed/0xba0 [ 87.335148][ T4459] ? __ext4_read_dirblock+0x890/0x890 [ 87.340523][ T4459] ? rwsem_write_trylock+0x166/0x210 [ 87.345811][ T4459] ? inode_permission+0xf7/0x450 [ 87.350759][ T4459] ? clear_nonspinnable+0x60/0x60 [ 87.355803][ T4459] ext4_unlink+0x1d5/0x670 [ 87.360231][ T4459] vfs_unlink+0x359/0x5f0 [ 87.364570][ T4459] do_unlinkat+0x4a5/0x820 [ 87.369017][ T4459] ? fsnotify_link_count+0xf0/0xf0 [ 87.374141][ T4459] __x64_sys_unlink+0x45/0x50 [ 87.378821][ T4459] do_syscall_64+0x3b/0xb0 [ 87.383252][ T4459] ? clear_bhb_loop+0x45/0xa0 [ 87.387943][ T4459] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 87.393848][ T4459] RIP: 0033:0x7f35c8d7fed9 [ 87.398275][ T4459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.417883][ T4459] RSP: 002b:00007f35c9b4f058 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 87.426320][ T4459] RAX: ffffffffffffffda RBX: 00007f35c8f45fa0 RCX: 00007f35c8d7fed9 [ 87.434308][ T4459] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 87.442285][ T4459] RBP: 00007f35c8df3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 87.450258][ T4459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.458230][ T4459] R13: 0000000000000000 R14: 00007f35c8f45fa0 R15: 00007fff79678208 [ 87.466207][ T4459] [ 87.469523][ T4459] Kernel Offset: disabled [ 87.473854][ T4459] Rebooting in 86400 seconds..