last executing test programs: 9.094823607s ago: executing program 3 (id=125): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x589a}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, 0x0, {}, {0x2, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 8.530685232s ago: executing program 3 (id=127): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) r1 = mq_open(0x0, 0x6e93ebbbcc0884f2, 0x100, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001e00010a030000000000009b2d"], 0x28}}, 0x4040) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f00000006c0)={&(0x7f0000002000)={[{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x2}, {0x0}, {0x0}, {0x0, 0x0, 0x1}, {&(0x7f0000000280), 0x0, 0x3}]}, 0x7, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) 8.285098552s ago: executing program 3 (id=128): r0 = socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f0000000140)={0x1, 0x5, 0x3, 0x0, 0xff, 0xea2b, 0x7, 0x2300000000000}, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r3, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x105480, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000840) connect$inet(r0, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) 8.019073523s ago: executing program 0 (id=131): ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"2996acbf16803bb01c4b856180c82669", 0x0, 0x0, {0x1, 0x3}, {0x0, 0x400}, 0x6, [0x1, 0x7, 0x40, 0x2, 0xd1, 0x2, 0x1, 0x7, 0x10000, 0x5, 0x401, 0x100, 0x0, 0x9, 0xf, 0x8]}) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000000)={0x2, 0x7e7d}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000008000000020000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="000000ffff0000000000000100"/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r6, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xe, 0x5, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018260000", @ANYRES32=r7, @ANYBLOB="000000000500000095000000000000003648175d296281cea9bd2c0599fd68cc0bf1d901e3176c35ea73c94408ab270f7deecccfe2f5941439cef6e05b4f783eda95d6d27a7b2df1aa476fc0e960c85528f981795a891e11a44d34dc139831eeb8db1031d62eb6d631fe2753159e408cee73a66a52962d9d14"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) setgroups(0x0, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) mkdir(&(0x7f0000000040)='./bus\x00', 0x10b) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./bus\x00') 7.431624481s ago: executing program 1 (id=135): pipe(0x0) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e30", 0x3, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffff, 0x20000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x7b53a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=[r4], 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b000000050000000500000009"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018e58, &(0x7f0000000000), 0x1, 0x644, &(0x7f00000012c0)="$eJzs3c9rG9kdAPDvSLZjJ26dlFIa01JDDwmUOHYamraXJumhOQQaaA6l9BAT26mJ8oPYgSYNJIFCW2ihlF7Dksv+A7kvue9tWdjd254XssuSZRd2g7XMaGRLthTLsiXZmc8HpMy8Gc17X41e3nsaPU8AhTWVPpUijkasXkkiJhq2jUdt41S+38vPH1xNH0lUq3/4LIkkT6vt/Y9YzV93KH1KIkYj4r3zEd8rb853+d7963OVaubZw4iTKzdun1y+d//E0o25awvXFm7Onvrl6TMzv5o9PbsrcR7K/71w8fc/+s/f//KLxfcrJ5I4G5eH/zYfTXF0pZq0SJyKqVithVhtTB+KiDPpQov3Zb/pKIQDvS8H3Snnn8fhiPhBTEQ5W6uZiKV/D7RwQE9VyxFVoKAS9R8Kqt4PqI/tOxsHX+5xr6R/XpyrDYA2xz9U+24kRrOx0cGXScPIqPbdxuFdyD/N49WDySfpI5q+h/hq7ewM7UI+7Tx6HBE/bBV/kpXtcBZpGn+paayfRMRMRIzk5fttF1k3Hqtuh9/DbL8Q24i/8TyUIuJs/m+afr7L/Kc2rPc7fgCK6fm5vCHPWuP19q+61jbV27/m/s94i7arG9tu/1pdaNmB9v2/ens/mvV7Shv6YWkxLrU+5PDGhI//deF/7fJv7P+9epBk5aj3BfvhxeOIyQ3x/zMNNu//pPEnLc5/usuVs53l8bsPPr3Qbltz/JNPOo1/05vcperTiGMtxz/rH7R06TXXJ08uLlUWZmrPLfN4590/v90u/27j3y3p+T/YJv6G81/a+Lr0PbndYR7PLj29MdJm2/iW8Zc+GUlq4836Mf46t7JyZzZiJLmY79KQfur1ZanvUz9GGv/xn7au/02f/8fNxxlrHMBs4fYfr79st62b899wMXm12mEZ2knjn9/6/G+q/2nafzvM48s/3f1xu20t4o/I4x/bSWAAAAAAAABQQKXsGmxSml5bLpWmp2vzZb8fB0uVW8srP1u8dffmfMTx7PeQw6X6le6J2nqSrs/mv4etr5/asP7ziDgSEf8vj2Xr01dvVeYHHTwAAAAAAAAAAAAAAAAAAADsEYfy+f/1+1R/Ua7N/wcKopc3mAP2NvUfiiur/5tu8bS1Az0oC9Bf2n8oLvUfikv9h+JS/6G41H8oLvUfikv9h+Laov67zA8AAAAA+9ORnzz/KImIR78eyx6pkXxbeXigRQN6rFUVrz4cQEGAvisPugDAwKxd+u9i+j+wv3U0xP86/+OAvS8OMABJq8Ssc1B9feV/3vKVTXQtAAAAAAAAAAAAAGB3HDvafv6/6f/wZvPbfCiuHcz/96cDYJ9z6w8orvUxvrt8QFFtNYt/tN2GDub/AwAAAAAAAAAAAAC7Yzx7JKXpfC7weJRK09MR34mIwzGcLC5VFmYi4rsR8WF5+EC6PjvoQgMAAAAAAAAAAAAAAAAAAMAbZvne/etzlcrCncaFbzalvNkL9bug9iGv38Q2XxVJ/9+WsYgY+Enp2cJQQ0oS8Sg983uiYHeWY28UI1sY8H9MAAAAAAAAAAAAAAAAAABQQA1zj1ubfKvPJQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/lu//3/vFgYdIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwP30bAAD//8UxQX0=") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f00000008c0)='-0', 0x2) 5.82850256s ago: executing program 1 (id=140): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000000580)=[{r4}], 0x1, 0xffffffffffbffff8) dup2(r3, r4) fcntl$setown(r3, 0x8, r2) tkill(r2, 0x13) 5.314983352s ago: executing program 2 (id=141): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x20, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x50) 5.217114079s ago: executing program 1 (id=142): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r6 = dup2(r5, r5) write$tun(r6, &(0x7f0000000180)=ANY=[@ANYRES64, @ANYRESHEX=r0], 0x46) recvmmsg(r6, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x50, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}}, 0x0) 5.114798288s ago: executing program 2 (id=143): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r6 = dup2(r5, r5) write$tun(r6, &(0x7f0000000180)=ANY=[@ANYRES64, @ANYRESHEX=r0], 0x46) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x50, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}}, 0x0) 4.864816788s ago: executing program 4 (id=144): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r3 = dup(r1) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) shutdown(r3, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x0, 0x1b}, 0x9c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) socket(0x10, 0x3, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000000)={r7, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) 4.726906119s ago: executing program 0 (id=145): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40448c0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x70}}}}}}}, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r2 = gettid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0005}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) flistxattr(r4, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000010000006111b800000000009500000000000000"], &(0x7f00000004c0)='GPL\x00'}, 0x94) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r1) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r7, 0x400, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "fd0100", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e23, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11, 0x0, 0x3}}}}}}}, 0x0) 4.683002532s ago: executing program 4 (id=146): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000500)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x2000, @fd, 0x9, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) 4.658697324s ago: executing program 4 (id=147): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.449510731s ago: executing program 0 (id=148): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}}, 0x24}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000140)='A', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x100, @remote, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x9, 0x0, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7, 0x3}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 4.246246988s ago: executing program 3 (id=149): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x40) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r0) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r9, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 4.22334709s ago: executing program 3 (id=150): pipe(0x0) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e30", 0x3, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffff, 0x20000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x7b53a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b000000050000000500000009"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018e58, &(0x7f0000000000), 0x1, 0x644, &(0x7f00000012c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f00000008c0)='-0', 0x2) 1.706835163s ago: executing program 4 (id=151): setreuid(0xffffffffffffffff, 0xee01) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000003640)={'tunl0\x00', &(0x7f00000035c0)={'gre0\x00', 0x0, 0x7800, 0x80, 0x3, 0x59, {{0x5, 0x4, 0x1, 0x7, 0x14, 0x65, 0x0, 0x2, 0x29, 0x0, @rand_addr=0x64010100, @private=0xa010100}}}}) 1.664210476s ago: executing program 2 (id=152): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000640)={@remote, @dev={0xfe, 0x80, '\x00', 0x10}, @empty, 0x9, 0x40, 0x8000, 0x100, 0x0, 0x110227, r1}) 1.661696926s ago: executing program 1 (id=153): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000005300)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000006c0)={r3}, &(0x7f0000000700)=0x8) setpgid(0x0, 0xffffffffffffffff) 1.560886874s ago: executing program 0 (id=154): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r6 = dup2(r5, r5) write$tun(r6, &(0x7f0000000180)=ANY=[@ANYRES64, @ANYRESHEX=r0], 0x46) recvmmsg(r6, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) 1.406684037s ago: executing program 2 (id=155): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0103000000000000000001"], 0x30}}, 0x44) 1.228967321s ago: executing program 3 (id=156): ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"2996acbf16803bb01c4b856180c82669", 0x0, 0x0, {0x1, 0x3}, {0x0, 0x400}, 0x6, [0x1, 0x7, 0x40, 0x2, 0xd1, 0x2, 0x1, 0x7, 0x10000, 0x5, 0x401, 0x100, 0x0, 0x9, 0xf, 0x8]}) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000000)={0x2, 0x7e7d}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000008000000020000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="000000ffff0000000000000100"/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r6, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xe, 0x5, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018260000", @ANYRES32=r7, @ANYBLOB="000000000500000095000000000000003648175d296281cea9bd2c0599fd68cc0bf1d901e3176c35ea73c94408ab270f7deecccfe2f5941439cef6e05b4f783eda95d6d27a7b2df1aa476fc0e960c85528f981795a891e11a44d34dc139831eeb8db1031d62eb6d631fe2753159e408cee73a66a52962d9d14"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) setgroups(0x0, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) mkdir(&(0x7f0000000040)='./bus\x00', 0x10b) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./bus\x00') 1.086900133s ago: executing program 4 (id=157): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r2, 0x0, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000040)={0x20000001}) close(r3) 874.58241ms ago: executing program 2 (id=158): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x2000000, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0xffffffffffffff4d}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 790.264267ms ago: executing program 0 (id=159): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x20, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) getgid() 634.904179ms ago: executing program 1 (id=160): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) 625.10119ms ago: executing program 4 (id=161): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$xdp(0x2c, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket(0x2c, 0x3, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000280)=0x497, 0x4) epoll_create1(0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00'}, 0x18) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 583.751233ms ago: executing program 0 (id=162): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_create1(0x0) poll(&(0x7f00000000c0)=[{r1, 0x34}], 0x1, 0x90f0) clock_gettime(0x0, &(0x7f0000000840)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0xbec6aa3925e6b271, 0x124, 0x99a, {r2, r3/1000+60000}, {}, {0x4, 0x0, 0x1}, 0x1, @can={{0x1, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "aac1e22dc8938590"}}, 0x48}, 0x1, 0x0, 0x0, 0x4040}, 0xc0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x5452, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r4, 0x0, 0x86, 0xf4, &(0x7f0000000180)="0583d2f3796fcbb323c4f1833a8ee75b7093d93c3752a112e26b086b7454a4ff3482f51f9c18a8181df55bd251970ca9eb3ea11dbbe920f1fbc6453b78e61d02193394688021204b749e3b87ff86326fd16aae2a898d46a6e1cc1ad07af26fee81ff66f603a6756427bb585e05b4d6c16cc32b455e739f9007a762448d801c20a85c3ba982e4", &(0x7f0000000300)=""/244, 0xfffffff8, 0x0, 0x21, 0xe2, &(0x7f0000000240)="4c052df399f5723de1d5a906fc09d20f41b48d9ac1272f32e61e407dc1bb5842b8", &(0x7f0000000600)="9a7463907918ea85a70f60b5d396d66053baac3725d8b92a3f253c853ec31d0cb436c510d0cb14b1f2c927abbe957a0494324d912f8484fa6b66c933c3b3e262eaee1c0952b052ab632af3fdf2f52ad9963aa143dc0b620f165c2b74f7faa5127960ce20a7c9b20a6f2e9f7533d1939391e1a79274ebde95348999b2fee7a779d9ad0e88dd7c83b0441c0845ebc70174924f5e0f648523ac36c82836086c8f2ebdcc6d38e29f4e504e548b5c33ee048771c4af79a8e7db76ce2ddb6439184025f47871f13ae9f3be40986b3afc703179257a6925f748cc5f4d050937f87c57a179e3", 0x1, 0x0, 0x5}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r5}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r8 = syz_io_uring_setup(0x1c49, &(0x7f0000000740)={0x0, 0x6ecc, 0x10, 0x2, 0x21b}, &(0x7f0000000280), &(0x7f00000007c0)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r8, 0x18, &(0x7f0000000800)={0x9, r7, 0x2, {0x2, 0x1ab}, 0x8}, 0x1) 38.624447ms ago: executing program 1 (id=163): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb708000008000000000000850000000100000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='loginuid\x00') writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000080)='8', 0x1}], 0x1) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000003c0)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='mm_page_free\x00', r2}, 0x18) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b70300000000b1098500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x59, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r6, 0x2, 0x6}, 0x10) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000240)={r6, 0x1, 0x6, @multicast}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000d00)=ANY=[@ANYRESDEC, @ANYRES64=0x0], &(0x7f0000000cc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file1\x00', 0x1808004, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES64], 0x4, 0x7cc, &(0x7f0000002200)="$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") r7 = socket(0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3ce, &(0x7f00000004c0)="$eJzs3M9rHFUcAPDvTH7UpjUbQVD0EvFgpJif1lbxYE5e9KR48bQk6Q9ME2lWsCVCBc8FQdCrR/8A8dKDgtW/wKtHkUKQJN5XZndmMybZtJtuHNl8PvDIe/M2+97MY2bfPN57AZxakxHxVkQMRcRsRNTy42ke4k47ZJ/b3d5cykISzeZ7fyWRRMTO9uZS8V1J/vdc/gVTaUT6RRLPH1Luxq3bH9VXV1du5umZxo2PZzZu3X7l+o361ZWrK2sLC/Pzly/OXnrtct/O9evNdz/84fe3d765M/5Mfbl2N6vv+TyvfB79MhmTnWuy3+v9LqxiT5TiyXCFFQEA4Ehp3vcfbvX/azEUe523Wtz9udLKAQAAAH3RbBZ/AQAAgMGVePcHAACAAVfMA9jZ3lwqQoXTEfiPbS1GxES7/Yv13e2c4c6a3pF963v7aTIi/p76/uUsxAmtwwYAAAA4zX5cbG/8d3D8L41nS587GxFjxd5+fTS5L31w/Cd90OciKdlajHiztLfjbqn9cxNDeerJ1lDhSHLl+urKbESMR8RUjJzJ0nNHlDH+xh/3uuWVx/+ykJVfjAXm9XgwfObf/7Ncb9Qf55zZs/V5xHPDh7V/0hnzLe+TeRyfXfvyWre8h7c/J6n5bcRLh97/ezuXJkfvzzrTeh7MFE+Fg9bu3X+hW/nav1rZ/T92dPtPJOX9ejd6L+OD++d/65Z33Of/aPJ+q4Kj+bFP643GzbmI0eSdg8fne6/zoCquR3G9svafevHw3/+i/5fkv/3jpf2he/HTL7uXuuW5/6uVtf9yT/d/75GLv353oVv5j3b/v9qqzFR+RP/v4R61gaquJwAAAAAAAAD9kbbm9iXpdCeeptPT7Xm+T8dYurq+0bhwZf2TteX2HMCJGEmLmV610nzQufYy8k56fl96ISKeioivamdb6eml9dXlqk8eAAAATolzXd7/M38eZ7EHAAAA8P80UXUFAAAAgBPn/R8AAAAG2uPs6y8iIjKokaqfTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACn2z8BAAD//yly2dE=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) bind$unix(r7, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYRES32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBENT(r8, 0x4b47, &(0x7f0000000280)={0x5, 0x2, 0x6}) 0s ago: executing program 2 (id=164): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000340)=0xc6, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x400, 0xe, @loopback, 0x5}, 0x1c) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10}}, 0x58}}, 0x0) sendto$inet6(r1, &(0x7f0000000300)="4b4385bd35e0e70abb78dce30056dcce7bc67d495c9a55bfad860af9e7b705deab168cbf68bbc7ac28250c578c75fc0236ea1f7feced05191fc3765211bf63e2253cdb39071304717f1fe511740e15b0411d92a3829a96687b26a249e06d04ed97a84c5c78883dc5b56f545ff8ce096e68df8e72dfece207162da9816763722a01c5f751263eb9d8b273d65a94153cd18dd092e6af38d5b866c3d3b16e6dafeb09cca76bd226", 0xa6, 0x64040011, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, 0x0}, &(0x7f00000000c0)=0x40) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.217' (ED25519) to the list of known hosts. [ 64.565057][ T4172] cgroup: Unknown subsys name 'net' [ 64.711211][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.189833][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 68.038122][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 68.158684][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 68.179031][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 68.227855][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 68.248803][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.256301][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.264840][ T4186] device bridge_slave_0 entered promiscuous mode [ 68.297895][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.314292][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.322605][ T4186] device bridge_slave_1 entered promiscuous mode [ 68.402859][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 68.423216][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.432749][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.440565][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.448743][ T4187] device bridge_slave_0 entered promiscuous mode [ 68.476525][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.485791][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.493080][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.501133][ T4187] device bridge_slave_1 entered promiscuous mode [ 68.508695][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.519740][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.527875][ T4190] device bridge_slave_0 entered promiscuous mode [ 68.576004][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.583078][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.591771][ T4190] device bridge_slave_1 entered promiscuous mode [ 68.599023][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.607137][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.615155][ T4195] device bridge_slave_0 entered promiscuous mode [ 68.625514][ T4186] team0: Port device team_slave_0 added [ 68.642911][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.661434][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.668705][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.677475][ T4195] device bridge_slave_1 entered promiscuous mode [ 68.685696][ T4186] team0: Port device team_slave_1 added [ 68.692899][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.741148][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.761788][ T4187] team0: Port device team_slave_0 added [ 68.792689][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.803350][ T4187] team0: Port device team_slave_1 added [ 68.810417][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.817933][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.843996][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.858584][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.889931][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.897115][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.923567][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.936430][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.946089][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.953180][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.961290][ T4183] device bridge_slave_0 entered promiscuous mode [ 68.987875][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.995605][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.021738][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.041235][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.048701][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.057019][ T4183] device bridge_slave_1 entered promiscuous mode [ 69.066906][ T4190] team0: Port device team_slave_0 added [ 69.075311][ T4190] team0: Port device team_slave_1 added [ 69.092765][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.099821][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.126212][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.173734][ T4195] team0: Port device team_slave_0 added [ 69.205116][ T4195] team0: Port device team_slave_1 added [ 69.223708][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.238319][ T4186] device hsr_slave_0 entered promiscuous mode [ 69.245310][ T4186] device hsr_slave_1 entered promiscuous mode [ 69.252730][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.260776][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.286957][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.317603][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.327803][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.335356][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.361648][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.382317][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.389518][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.415855][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.449261][ T4187] device hsr_slave_0 entered promiscuous mode [ 69.456277][ T4187] device hsr_slave_1 entered promiscuous mode [ 69.462952][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.471291][ T4187] Cannot create hsr debugfs directory [ 69.477589][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.485061][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.511225][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.537131][ T4183] team0: Port device team_slave_0 added [ 69.579005][ T4183] team0: Port device team_slave_1 added [ 69.595414][ T4190] device hsr_slave_0 entered promiscuous mode [ 69.602411][ T4190] device hsr_slave_1 entered promiscuous mode [ 69.609196][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.617138][ T4190] Cannot create hsr debugfs directory [ 69.665059][ T4195] device hsr_slave_0 entered promiscuous mode [ 69.671821][ T4195] device hsr_slave_1 entered promiscuous mode [ 69.678803][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.686508][ T4195] Cannot create hsr debugfs directory [ 69.705235][ T4174] Bluetooth: hci1: command 0x0409 tx timeout [ 69.749666][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.757237][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.784145][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.784638][ T1325] Bluetooth: hci3: command 0x0409 tx timeout [ 69.801099][ T1325] Bluetooth: hci2: command 0x0409 tx timeout [ 69.801227][ T4174] Bluetooth: hci4: command 0x0409 tx timeout [ 69.818960][ T4174] Bluetooth: hci0: command 0x0409 tx timeout [ 69.858502][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.865764][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.892160][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.007857][ T4183] device hsr_slave_0 entered promiscuous mode [ 70.014932][ T4183] device hsr_slave_1 entered promiscuous mode [ 70.021988][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.029824][ T4183] Cannot create hsr debugfs directory [ 70.193139][ T4187] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.209705][ T4187] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.223770][ T4187] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.234680][ T4187] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.293970][ T4186] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.304736][ T4186] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.326686][ T4186] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.336998][ T4186] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.381046][ T4195] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.404026][ T4195] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.434119][ T4195] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.443698][ T4195] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.476233][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.522385][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.532489][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.550890][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.559367][ T4190] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.576789][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.595477][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.608755][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.618212][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.625501][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.637190][ T4190] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.649044][ T4190] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.678626][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.686412][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.697232][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.707207][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.719018][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.726154][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.734111][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.742219][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.750877][ T4190] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.766972][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.792277][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.805709][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.816962][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.824338][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.832523][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.865820][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.878462][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.889522][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.902236][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.911324][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.920031][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.927314][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.935351][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.944038][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.962639][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.987027][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.001184][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.010097][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.020290][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.031558][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.040393][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.050457][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.060652][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.081910][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.092259][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.101327][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.110876][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.120442][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.136485][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.153082][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.168054][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.180511][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.191932][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.201459][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.210251][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.219059][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.228936][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.237997][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.252208][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.271242][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.279865][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.295090][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.340020][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.349194][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.365176][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.372267][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.415219][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.423831][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.433564][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.446807][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.453909][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.459292][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.467566][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.492435][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.502300][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.579362][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.593785][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.603515][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.613493][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.622189][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.631602][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.641868][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.657392][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.671485][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.695437][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.708761][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.720452][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.729084][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.738511][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.764129][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.771982][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.780197][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 71.794544][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.815443][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.837301][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.858894][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.864717][ T4256] Bluetooth: hci4: command 0x041b tx timeout [ 71.866006][ T4246] Bluetooth: hci0: command 0x041b tx timeout [ 71.871729][ T4256] Bluetooth: hci2: command 0x041b tx timeout [ 71.880419][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.898003][ T4256] Bluetooth: hci3: command 0x041b tx timeout [ 71.905684][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.913458][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.922781][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.950881][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.965029][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.992762][ T4187] device veth0_vlan entered promiscuous mode [ 72.007158][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.021314][ T4187] device veth1_vlan entered promiscuous mode [ 72.030318][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.045363][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.053421][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.062494][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.072276][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.081042][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.088148][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.101980][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.110932][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.120060][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.129158][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.138343][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.145483][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.155674][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.164731][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.204012][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.212886][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.221097][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.230946][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.240215][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.250066][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.257199][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.267882][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.276399][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.290603][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.298975][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.307138][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.318783][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.328752][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.338714][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.345833][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.365010][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.372187][ T4186] device veth0_vlan entered promiscuous mode [ 72.394773][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.402368][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.420831][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.436678][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.445596][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.454675][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.463839][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.472554][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.491582][ T4187] device veth0_macvtap entered promiscuous mode [ 72.530404][ T4186] device veth1_vlan entered promiscuous mode [ 72.539247][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.553125][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.561669][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.576596][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.586142][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.597444][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.607546][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.617456][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.626666][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.636245][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.645046][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.653381][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.670399][ T4183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.682077][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.698856][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.711842][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.721457][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.732330][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.748229][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.760138][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.773140][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.781986][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.796585][ T4187] device veth1_macvtap entered promiscuous mode [ 72.816657][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.845245][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.891373][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.901109][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.933457][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.951161][ T4186] device veth0_macvtap entered promiscuous mode [ 72.960083][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.970639][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.980041][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.989929][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.998882][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.015374][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.026108][ T4186] device veth1_macvtap entered promiscuous mode [ 73.057004][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.065763][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.078153][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.105268][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.115113][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.138941][ T4187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.148726][ T4187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.158355][ T4187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.167350][ T4187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.180172][ T4195] device veth0_vlan entered promiscuous mode [ 73.195487][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.203398][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.223084][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.232100][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.246370][ T4195] device veth1_vlan entered promiscuous mode [ 73.258516][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.266654][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.302460][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.328724][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.339256][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.351067][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.364396][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.377327][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.392582][ T4195] device veth0_macvtap entered promiscuous mode [ 73.408205][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.417352][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.427918][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.442992][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.452393][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.466006][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.478356][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.489757][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.507639][ T4195] device veth1_macvtap entered promiscuous mode [ 73.523403][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.537095][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.546290][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.555719][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.581265][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.592067][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.606456][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.618642][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.630703][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.659783][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.669979][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.679112][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.688783][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.700084][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.709946][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.720765][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.731751][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.742302][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.753052][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.765083][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.797587][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.806608][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.815580][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.823830][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.833104][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.841794][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.852141][ T4195] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.861175][ T4246] Bluetooth: hci1: command 0x040f tx timeout [ 73.867149][ T4195] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.867220][ T4195] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.867249][ T4195] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.903286][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.912449][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.930498][ T4183] device veth0_vlan entered promiscuous mode [ 73.937085][ T4246] Bluetooth: hci3: command 0x040f tx timeout [ 73.943274][ T4246] Bluetooth: hci2: command 0x040f tx timeout [ 73.953589][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.965132][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.973915][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.982854][ T4246] Bluetooth: hci0: command 0x040f tx timeout [ 73.990247][ T4246] Bluetooth: hci4: command 0x040f tx timeout [ 74.001316][ T4190] device veth0_vlan entered promiscuous mode [ 74.042084][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.053499][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.066383][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.075322][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.085613][ T4190] device veth1_vlan entered promiscuous mode [ 74.126285][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.135553][ T4183] device veth1_vlan entered promiscuous mode [ 74.160785][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.179152][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.189835][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.199007][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.207645][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.220649][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.278358][ T4263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.294471][ T4263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.301880][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.319983][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.343928][ T4190] device veth0_macvtap entered promiscuous mode [ 74.371864][ T4183] device veth0_macvtap entered promiscuous mode [ 74.381582][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.389937][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.404029][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.425395][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.454571][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.462563][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.486257][ T4190] device veth1_macvtap entered promiscuous mode [ 74.497235][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.510241][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.526239][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.560575][ T4183] device veth1_macvtap entered promiscuous mode [ 74.565474][ T4299] process 'syz.2.6' launched './file2' with NULL argv: empty string added [ 74.583109][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.596205][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.607079][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.619416][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.630303][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.641036][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.652647][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.675432][ T4263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.683548][ T4263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.693132][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.702765][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.721340][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.733663][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.753163][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.768457][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.781665][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.797630][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.809044][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.824686][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.843039][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.867981][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.879347][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.891840][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.903684][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.913647][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.924522][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.935791][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.935833][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.937491][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.940302][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.940322][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.940333][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.940348][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.940358][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.940372][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.940382][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.940395][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.941779][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.945403][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.945437][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.945466][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.945494][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.948112][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.948761][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.949274][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.950569][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.951034][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.951513][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.958836][ T4190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.958872][ T4190] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.958901][ T4190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.958929][ T4190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.966890][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.966940][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.971193][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.183334][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.183389][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.185738][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.223189][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.223268][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.226695][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.271422][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.271476][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.274075][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.335249][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.633091][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.634690][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.651736][ T26] audit: type=1326 audit(1756538389.912:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4318 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63be58be9 code=0x7ffc0000 [ 75.651780][ T26] audit: type=1326 audit(1756538389.912:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4318 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63be58be9 code=0x7ffc0000 [ 75.738574][ T26] audit: type=1326 audit(1756538390.002:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4318 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe63be58be9 code=0x7ffc0000 [ 75.740762][ T26] audit: type=1326 audit(1756538390.002:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4318 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63be58be9 code=0x7ffc0000 [ 75.741007][ T26] audit: type=1326 audit(1756538390.002:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4318 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63be58be9 code=0x7ffc0000 [ 75.742776][ T26] audit: type=1326 audit(1756538390.002:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4318 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe63be58be9 code=0x7ffc0000 [ 75.750608][ T26] audit: type=1326 audit(1756538390.012:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4318 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63be58be9 code=0x7ffc0000 [ 75.775083][ T26] audit: type=1326 audit(1756538390.042:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4318 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63be58be9 code=0x7ffc0000 [ 75.775760][ T26] audit: type=1326 audit(1756538390.042:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4318 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe63be58be9 code=0x7ffc0000 [ 75.784285][ T4320] netlink: 204 bytes leftover after parsing attributes in process `syz.3.11'. [ 75.784584][ T26] audit: type=1326 audit(1756538390.052:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4318 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63be58be9 code=0x7ffc0000 [ 75.938823][ C1] vkms_vblank_simulate: vblank timer overrun [ 75.939915][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 76.004862][ C1] vkms_vblank_simulate: vblank timer overrun [ 76.015017][ T4249] Bluetooth: hci4: command 0x0419 tx timeout [ 76.015099][ T4249] Bluetooth: hci0: command 0x0419 tx timeout [ 76.015181][ T4249] Bluetooth: hci2: command 0x0419 tx timeout [ 76.015761][ T4249] Bluetooth: hci3: command 0x0419 tx timeout [ 77.259511][ T4338] lo speed is unknown, defaulting to 1000 [ 77.260280][ T4338] lo speed is unknown, defaulting to 1000 [ 77.908643][ T4338] lo speed is unknown, defaulting to 1000 [ 77.918992][ T4338] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 77.933252][ T4338] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 77.960716][ T4341] loop3: detected capacity change from 0 to 512 [ 77.962832][ T4338] lo speed is unknown, defaulting to 1000 [ 77.974383][ T4338] lo speed is unknown, defaulting to 1000 [ 78.226426][ T4338] lo speed is unknown, defaulting to 1000 [ 78.233297][ T4338] lo speed is unknown, defaulting to 1000 [ 78.243147][ T4338] lo speed is unknown, defaulting to 1000 [ 78.254695][ T4338] lo speed is unknown, defaulting to 1000 [ 79.523204][ T4350] siw: device registration error -23 [ 79.860727][ T4352] tipc: Started in network mode [ 79.879148][ T4352] tipc: Node identity 56efce9268a, cluster identity 4711 [ 79.900467][ T4352] tipc: Enabled bearer , priority 0 [ 79.946050][ T4352] tipc: Resetting bearer [ 80.124038][ T4351] tipc: Disabling bearer [ 80.158435][ T4359] loop4: detected capacity change from 0 to 512 [ 80.209621][ T4359] EXT4-fs (loop4): Ignoring removed oldalloc option [ 80.215691][ T4341] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.14: bg 0: block 248: padding at end of block bitmap is not set [ 80.240071][ T4341] EXT4-fs error (device loop3): ext4_acquire_dquot:6209: comm syz.3.14: Failed to acquire dquot type 1 [ 80.273908][ T4359] EXT4-fs (loop4): 1 truncate cleaned up [ 80.292506][ T4359] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,noload,. Quota mode: writeback. [ 80.334569][ T4341] EXT4-fs (loop3): 1 truncate cleaned up [ 80.340394][ T4341] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 80.362497][ T4341] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.426579][ T4369] loop1: detected capacity change from 0 to 8192 [ 80.641943][ T4369] loop9: detected capacity change from 0 to 7 [ 80.665745][ T4369] Dev loop9: unable to read RDB block 7 [ 81.246567][ T4375] netlink: 16 bytes leftover after parsing attributes in process `syz.3.26'. [ 81.394986][ T4375] netlink: 48 bytes leftover after parsing attributes in process `syz.3.26'. [ 81.538722][ T4369] loop9: unable to read partition table [ 81.566848][ T4369] loop9: partition table beyond EOD, truncated [ 81.628742][ T4369] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 81.628742][ T4369] ) failed (rc=-5) [ 81.974035][ T4394] siw: device registration error -23 [ 82.987941][ T26] kauditd_printk_skb: 36 callbacks suppressed [ 82.987957][ T26] audit: type=1326 audit(1756538397.252:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4405 comm="syz.0.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645441abe9 code=0x7ffc0000 [ 83.027425][ T4407] 9pnet: Insufficient options for proto=fd [ 83.254334][ T26] audit: type=1326 audit(1756538397.292:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4405 comm="syz.0.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645441abe9 code=0x7ffc0000 [ 83.284694][ T26] audit: type=1326 audit(1756538397.292:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4405 comm="syz.0.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f645441abe9 code=0x7ffc0000 [ 83.449053][ T4420] loop2: detected capacity change from 0 to 1024 [ 84.126039][ T4420] ======================================================= [ 84.126039][ T4420] WARNING: The mand mount option has been deprecated and [ 84.126039][ T4420] and is ignored by this kernel. Remove the mand [ 84.126039][ T4420] option from the mount to silence this warning. [ 84.126039][ T4420] ======================================================= [ 84.592037][ T4420] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 84.601594][ T4420] EXT4-fs (loop2): orphan cleanup on readonly fs [ 84.627500][ T4420] Quota error (device loop2): v2_read_file_info: Block with free entry too big (1283 >= 6). [ 84.638402][ T4420] EXT4-fs warning (device loop2): ext4_enable_quotas:6461: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 84.653139][ T4420] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 84.661777][ T4420] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz.2.32: Freeing blocks not in datazone - block = 0, count = 4096 [ 84.679436][ T4420] EXT4-fs (loop2): 1 orphan inode deleted [ 84.685241][ T4420] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 84.711111][ T4417] EXT4-fs error (device loop2): ext4_lookup:1858: inode #15: comm syz.2.32: iget: bad extended attribute block 6 [ 84.912838][ T26] audit: type=1326 audit(1756538399.172:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4425 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc21f12be9 code=0x7ffc0000 [ 84.976222][ T26] audit: type=1326 audit(1756538399.202:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4425 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc21f12be9 code=0x7ffc0000 [ 85.037580][ T4437] syz.3.43[4437] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.037682][ T4437] syz.3.43[4437] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.185975][ T26] audit: type=1326 audit(1756538399.342:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4425 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efc21f09ba7 code=0x7ffc0000 [ 85.219627][ T26] audit: type=1326 audit(1756538399.342:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4425 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efc21eaedb9 code=0x7ffc0000 [ 85.242059][ T26] audit: type=1326 audit(1756538399.342:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4425 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc21f12be9 code=0x7ffc0000 [ 85.276455][ T4435] siw: device registration error -23 [ 85.286314][ T26] audit: type=1326 audit(1756538399.352:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4425 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efc21f09ba7 code=0x7ffc0000 [ 85.502491][ T4447] loop3: detected capacity change from 0 to 2048 [ 85.705297][ T4447] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 85.926874][ T4461] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 86.827967][ T2857] cfg80211: failed to load regulatory.db [ 87.068007][ T4469] lo speed is unknown, defaulting to 1000 [ 87.392760][ T4482] loop2: detected capacity change from 0 to 1024 [ 87.570799][ T4482] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 87.585981][ T4482] EXT4-fs (loop2): orphan cleanup on readonly fs [ 87.598887][ T4482] EXT4-fs warning (device loop2): ext4_enable_quotas:6461: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 87.613680][ T4482] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 87.625395][ T4482] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz.2.53: Freeing blocks not in datazone - block = 0, count = 4096 [ 87.648406][ T4482] EXT4-fs (loop2): 1 orphan inode deleted [ 87.654534][ T4482] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 87.697038][ T4482] EXT4-fs error (device loop2): ext4_lookup:1858: inode #15: comm syz.2.53: iget: bad extended attribute block 6 [ 88.166401][ T4499] program syz.0.61 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.185809][ T4498] 9pnet: Insufficient options for proto=fd [ 88.462516][ T26] kauditd_printk_skb: 143 callbacks suppressed [ 88.462531][ T26] audit: type=1326 audit(1756538402.722:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4513 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240f6c0be9 code=0x7ffc0000 [ 88.515704][ T26] audit: type=1326 audit(1756538402.762:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4513 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240f6c0be9 code=0x7ffc0000 [ 88.515749][ T26] audit: type=1326 audit(1756538402.762:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4513 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f240f6c0be9 code=0x7ffc0000 [ 88.585255][ T4516] siw: device registration error -23 [ 88.641957][ T4518] loop1: detected capacity change from 0 to 512 [ 88.718026][ T4518] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 88.718063][ T4518] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 88.883987][ T4518] EXT4-fs (loop1): 1 truncate cleaned up [ 88.904329][ T4518] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none. [ 89.025801][ T4526] loop0: detected capacity change from 0 to 1024 [ 89.685324][ T4526] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 89.695032][ T4526] EXT4-fs (loop0): orphan cleanup on readonly fs [ 89.704604][ T4526] Quota error (device loop0): v2_read_file_info: Block with free entry too big (1283 >= 6). [ 89.715063][ T4526] EXT4-fs warning (device loop0): ext4_enable_quotas:6461: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 89.729862][ T4526] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 89.737647][ T4526] EXT4-fs error (device loop0): ext4_free_blocks:6218: comm syz.0.71: Freeing blocks not in datazone - block = 0, count = 4096 [ 89.753085][ T4526] EXT4-fs (loop0): 1 orphan inode deleted [ 89.759007][ T4526] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 89.781430][ T4523] EXT4-fs error (device loop0): ext4_lookup:1858: inode #15: comm syz.0.71: iget: bad extended attribute block 6 [ 90.194405][ T4538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.75'. [ 90.205125][ T4538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.378793][ T4539] loop4: detected capacity change from 0 to 512 [ 90.591600][ T4539] EXT4-fs (loop4): 1 orphan inode deleted [ 90.598255][ T4539] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 90.609694][ T4539] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.947961][ T4538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.129836][ T13] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 91.434171][ T26] audit: type=1326 audit(1756538405.692:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4558 comm="syz.0.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645441abe9 code=0x7ffc0000 [ 91.499080][ T26] audit: type=1326 audit(1756538405.702:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4558 comm="syz.0.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645441abe9 code=0x7ffc0000 [ 91.527704][ T4563] EXT4-fs error (device loop1): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.1.70: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 91.573380][ T4563] EXT4-fs (loop1): Remounting filesystem read-only [ 91.580018][ T4563] EXT4-fs error (device loop1) in ext4_delete_entry:2800: Corrupt filesystem [ 91.591889][ T4563] EXT4-fs (loop1): Remounting filesystem read-only [ 91.598607][ T4563] EXT4-fs warning (device loop1): ext4_rename_delete:3792: inode #2: comm syz.1.70: Deleting old file: nlink 5, error=-117 [ 91.925403][ T26] audit: type=1326 audit(1756538405.702:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4558 comm="syz.0.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f645441abe9 code=0x7ffc0000 [ 92.114686][ T26] audit: type=1326 audit(1756538405.702:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4558 comm="syz.0.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645441abe9 code=0x7ffc0000 [ 92.124600][ T13] usb 4-1: unable to get BOS descriptor or descriptor too short [ 92.291096][ T26] audit: type=1326 audit(1756538405.702:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4558 comm="syz.0.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645441abe9 code=0x7ffc0000 [ 92.323982][ T13] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 92.356034][ T4570] netlink: 5 bytes leftover after parsing attributes in process `syz.1.83'. [ 92.381123][ T4569] siw: device registration error -23 [ 92.381698][ T13] usb 4-1: can't read configurations, error -61 [ 92.426978][ T26] audit: type=1326 audit(1756538405.702:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4558 comm="syz.0.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f645441abe9 code=0x7ffc0000 [ 92.708370][ T13] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 93.053895][ T4580] loop1: detected capacity change from 0 to 1024 [ 93.354307][ T4580] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 93.390021][ T4580] EXT4-fs (loop1): orphan cleanup on readonly fs [ 93.403064][ T4580] EXT4-fs warning (device loop1): ext4_enable_quotas:6461: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 93.418146][ T4580] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 93.428883][ T4580] EXT4-fs error (device loop1): ext4_free_blocks:6218: comm syz.1.86: Freeing blocks not in datazone - block = 0, count = 4096 [ 93.447876][ T4580] EXT4-fs (loop1): 1 orphan inode deleted [ 93.453839][ T4580] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 93.539806][ T4580] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.86: iget: bad extended attribute block 6 [ 93.984406][ T13] usb 4-1: device descriptor read/all, error -71 [ 93.991866][ T13] usb usb4-port1: attempt power cycle [ 93.998167][ T4584] hub 2-0:1.0: USB hub found [ 94.012690][ T4584] hub 2-0:1.0: 1 port detected [ 94.593439][ T4605] loop4: detected capacity change from 0 to 1024 [ 95.004680][ T4605] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 95.560301][ T4605] EXT4-fs (loop4): orphan cleanup on readonly fs [ 95.624288][ T4609] siw: device registration error -23 [ 95.687079][ T4605] __quota_error: 65 callbacks suppressed [ 95.687099][ T4605] Quota error (device loop4): v2_read_file_info: Block with free entry too big (1283 >= 6). [ 95.703109][ T4605] EXT4-fs warning (device loop4): ext4_enable_quotas:6461: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 95.717866][ T4605] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 95.749751][ T4605] EXT4-fs error (device loop4): ext4_free_blocks:6218: comm syz.4.93: Freeing blocks not in datazone - block = 0, count = 4096 [ 95.904618][ T4605] EXT4-fs (loop4): 1 orphan inode deleted [ 95.910399][ T4605] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 95.955236][ T4603] EXT4-fs error (device loop4): ext4_lookup:1858: inode #15: comm syz.4.93: iget: bad extended attribute block 6 [ 96.001295][ T4603] lo speed is unknown, defaulting to 1000 [ 96.549789][ T4621] loop2: detected capacity change from 0 to 128 [ 96.625257][ T4622] loop3: detected capacity change from 0 to 1024 [ 96.929324][ T4622] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 96.943099][ T4622] EXT4-fs (loop3): orphan cleanup on readonly fs [ 96.954496][ T4622] Quota error (device loop3): v2_read_file_info: Block with free entry too big (1283 >= 6). [ 96.965163][ T4622] EXT4-fs warning (device loop3): ext4_enable_quotas:6461: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 96.979859][ T4622] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 96.994472][ T4622] EXT4-fs error (device loop3): ext4_free_blocks:6218: comm syz.3.100: Freeing blocks not in datazone - block = 0, count = 4096 [ 97.011767][ T4622] EXT4-fs (loop3): 1 orphan inode deleted [ 97.017619][ T4622] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 97.055801][ T4622] EXT4-fs error (device loop3): ext4_lookup:1858: inode #15: comm syz.3.100: iget: bad extended attribute block 6 [ 97.444815][ T26] audit: type=1326 audit(1756538411.712:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4627 comm="syz.4.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240f6c0be9 code=0x7ffc0000 [ 97.541424][ T26] audit: type=1326 audit(1756538411.742:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4627 comm="syz.4.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240f6c0be9 code=0x7ffc0000 [ 97.651292][ T4633] tipc: Started in network mode [ 97.652810][ T26] audit: type=1326 audit(1756538411.742:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4627 comm="syz.4.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f240f6c0be9 code=0x7ffc0000 [ 97.703253][ T4635] loop4: detected capacity change from 0 to 512 [ 97.715016][ T4633] tipc: Node identity e69320a283ab, cluster identity 4711 [ 97.722300][ T4633] tipc: Enabled bearer , priority 0 [ 97.732778][ T26] audit: type=1326 audit(1756538411.742:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4627 comm="syz.4.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240f6c0be9 code=0x7ffc0000 [ 97.787119][ T26] audit: type=1326 audit(1756538411.742:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4627 comm="syz.4.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240f6c0be9 code=0x7ffc0000 [ 97.854583][ T4636] device syzkaller0 entered promiscuous mode [ 97.883570][ T4632] tipc: Resetting bearer [ 97.942286][ T4632] tipc: Disabling bearer [ 97.987046][ T4648] loop2: detected capacity change from 0 to 128 [ 98.013435][ T4635] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 98.094648][ T4651] siw: device registration error -23 [ 98.464736][ T4635] EXT4-fs (loop4): 1 truncate cleaned up [ 98.551547][ T4635] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none. [ 98.858148][ T26] audit: type=1800 audit(1756538413.122:275): pid=4648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.113" name="file2" dev="loop2" ino=1048592 res=0 errno=0 [ 98.890215][ T4648] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 98.930283][ T4664] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 98.932797][ T4661] IPVS: stopping master sync thread 4664 ... [ 98.992763][ T4648] FAT-fs (loop2): Filesystem has been set read-only [ 99.001746][ T4648] attempt to access beyond end of device [ 99.001746][ T4648] loop2: rw=524288, want=2073, limit=128 [ 99.071840][ T4648] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 99.150146][ T4648] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 99.186292][ T4648] attempt to access beyond end of device [ 99.186292][ T4648] loop2: rw=0, want=2073, limit=128 [ 99.252185][ T4648] attempt to access beyond end of device [ 99.252185][ T4648] loop2: rw=0, want=2073, limit=128 [ 99.345132][ T4648] attempt to access beyond end of device [ 99.345132][ T4648] loop2: rw=0, want=2073, limit=128 [ 99.356785][ T4648] attempt to access beyond end of device [ 99.356785][ T4648] loop2: rw=0, want=2073, limit=128 [ 99.368272][ T4648] attempt to access beyond end of device [ 99.368272][ T4648] loop2: rw=0, want=2073, limit=128 [ 99.379531][ T4648] attempt to access beyond end of device [ 99.379531][ T4648] loop2: rw=0, want=2073, limit=128 [ 99.539594][ T4674] loop1: detected capacity change from 0 to 1024 [ 100.624428][ T26] audit: type=1326 audit(1756538414.862:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4644 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42ae72be9 code=0x7ffc0000 [ 100.675496][ T4648] attempt to access beyond end of device [ 100.675496][ T4648] loop2: rw=0, want=2073, limit=128 [ 100.731888][ T4648] attempt to access beyond end of device [ 100.731888][ T4648] loop2: rw=0, want=2073, limit=128 [ 100.753007][ T26] audit: type=1326 audit(1756538414.862:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4644 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42ae72be9 code=0x7ffc0000 [ 100.859356][ T4648] attempt to access beyond end of device [ 100.859356][ T4648] loop2: rw=0, want=2073, limit=128 [ 100.890982][ T26] audit: type=1326 audit(1756538414.862:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4644 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42ae72be9 code=0x7ffc0000 [ 100.966670][ T4674] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 100.975918][ T4674] EXT4-fs (loop1): orphan cleanup on readonly fs [ 100.983110][ T4674] Quota error (device loop1): v2_read_file_info: Block with free entry too big (1283 >= 6). [ 100.993369][ T4674] EXT4-fs warning (device loop1): ext4_enable_quotas:6461: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 101.008024][ T4674] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 101.016275][ T4674] EXT4-fs error (device loop1): ext4_free_blocks:6218: comm syz.1.116: Freeing blocks not in datazone - block = 0, count = 4096 [ 101.030448][ T4674] EXT4-fs (loop1): 1 orphan inode deleted [ 101.036302][ T4674] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 101.058236][ T4673] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.116: iget: bad extended attribute block 6 [ 101.082593][ T26] audit: type=1326 audit(1756538414.862:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4644 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42ae72be9 code=0x7ffc0000 [ 101.106592][ T26] audit: type=1326 audit(1756538414.862:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4644 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42ae72be9 code=0x7ffc0000 [ 101.129409][ T26] audit: type=1326 audit(1756538414.862:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4644 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa42ae72be9 code=0x7ffc0000 [ 101.156654][ T26] audit: type=1326 audit(1756538414.882:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4644 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42ae72be9 code=0x7ffc0000 [ 101.204292][ T26] audit: type=1326 audit(1756538414.882:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4644 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42ae72be9 code=0x7ffc0000 [ 101.296973][ T26] audit: type=1326 audit(1756538414.882:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4644 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fa42ae74a7c code=0x7ffc0000 [ 101.390538][ T26] audit: type=1326 audit(1756538414.882:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4644 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42ae72be9 code=0x7ffc0000 [ 101.451661][ T4689] tipc: Enabled bearer , priority 0 [ 101.505790][ T4693] device syzkaller0 entered promiscuous mode [ 101.700026][ T4689] tipc: Resetting bearer [ 101.744596][ T4684] tipc: Resetting bearer [ 101.765238][ T4695] siw: device registration error -23 [ 101.766007][ T4684] tipc: Disabling bearer [ 101.787676][ T4697] siw: device registration error -23 [ 101.822974][ T4699] loop1: detected capacity change from 0 to 512 [ 101.872865][ T4699] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 101.937743][ T4699] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 102.045204][ T4703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.127'. [ 102.071588][ T4699] EXT4-fs (loop1): 1 truncate cleaned up [ 102.077642][ T4699] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006e,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 102.113221][ T4694] siw: device registration error -23 [ 102.539133][ T4713] loop0: detected capacity change from 0 to 512 [ 102.646571][ T4713] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 102.686658][ T4713] EXT4-fs (loop0): 1 truncate cleaned up [ 102.704461][ T4713] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none. [ 103.386925][ T4731] loop1: detected capacity change from 0 to 1024 [ 104.159103][ T4731] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 104.177483][ T4731] EXT4-fs (loop1): orphan cleanup on readonly fs [ 104.186449][ T4731] EXT4-fs warning (device loop1): ext4_enable_quotas:6461: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 104.201190][ T4731] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 104.208164][ T4731] EXT4-fs error (device loop1): ext4_free_blocks:6218: comm syz.1.135: Freeing blocks not in datazone - block = 0, count = 4096 [ 104.222559][ T4731] EXT4-fs (loop1): 1 orphan inode deleted [ 104.228390][ T4731] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 104.250675][ T4730] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.135: iget: bad extended attribute block 6 [ 104.576732][ T4740] EXT4-fs error (device loop0): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.0.131: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 104.599128][ T4740] EXT4-fs (loop0): Remounting filesystem read-only [ 104.605819][ T4740] EXT4-fs error (device loop0) in ext4_delete_entry:2800: Corrupt filesystem [ 104.616049][ T4740] EXT4-fs (loop0): Remounting filesystem read-only [ 104.622599][ T4740] EXT4-fs warning (device loop0): ext4_rename_delete:3792: inode #2: comm syz.0.131: Deleting old file: nlink 5, error=-117 [ 105.294256][ T4744] siw: device registration error -23 [ 105.872909][ T4766] loop4: detected capacity change from 0 to 1024 [ 105.887120][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 105.887136][ T26] audit: type=1326 audit(1756538420.152:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4765 comm="syz.0.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645441abe9 code=0x7ffc0000 [ 106.006005][ T4766] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 106.023304][ T26] audit: type=1326 audit(1756538420.152:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4765 comm="syz.0.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f645441abe9 code=0x7ffc0000 [ 106.088736][ T26] audit: type=1326 audit(1756538420.152:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4765 comm="syz.0.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645441abe9 code=0x7ffc0000 [ 106.114688][ T26] audit: type=1326 audit(1756538420.152:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4765 comm="syz.0.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f645441abe9 code=0x7ffc0000 [ 108.707566][ T26] audit: type=1326 audit(1756538420.152:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4765 comm="syz.0.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645441abe9 code=0x7ffc0000 [ 108.757032][ T4780] loop3: detected capacity change from 0 to 1024 [ 108.850728][ T4780] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 108.860133][ T4780] EXT4-fs (loop3): orphan cleanup on readonly fs [ 108.867873][ T4780] Quota error (device loop3): v2_read_file_info: Block with free entry too big (1283 >= 6). [ 108.872956][ T26] audit: type=1326 audit(1756538420.152:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4765 comm="syz.0.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f645441abe9 code=0x7ffc0000 [ 108.878159][ T4780] EXT4-fs warning (device loop3): ext4_enable_quotas:6461: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 108.915078][ T4780] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 108.924711][ T4780] EXT4-fs error (device loop3): ext4_free_blocks:6218: comm syz.3.150: Freeing blocks not in datazone - block = 0, count = 4096 [ 108.940155][ T4780] EXT4-fs (loop3): 1 orphan inode deleted [ 108.946001][ T4780] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 108.971464][ T4779] EXT4-fs error (device loop3): ext4_lookup:1858: inode #15: comm syz.3.150: iget: bad extended attribute block 6 [ 109.067983][ T26] audit: type=1326 audit(1756538420.152:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4765 comm="syz.0.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645441abe9 code=0x7ffc0000 [ 109.312042][ T4796] netlink: 28 bytes leftover after parsing attributes in process `syz.2.155'. [ 109.358151][ T26] audit: type=1326 audit(1756538420.162:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4765 comm="syz.0.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f645441abe9 code=0x7ffc0000 [ 109.515575][ T4792] siw: device registration error -23 [ 109.614516][ T26] audit: type=1326 audit(1756538420.162:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4765 comm="syz.0.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645441abe9 code=0x7ffc0000 [ 109.762561][ T4802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.158'. [ 109.783273][ T4804] loop3: detected capacity change from 0 to 512 [ 109.829978][ T4802] device bond_slave_0 entered promiscuous mode [ 109.836641][ T4802] device bond_slave_1 entered promiscuous mode [ 109.884586][ T4802] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 109.897573][ T4804] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 109.937189][ T4804] EXT4-fs (loop3): 1 truncate cleaned up [ 109.942890][ T4804] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none. [ 109.972633][ T4802] device bond_slave_0 left promiscuous mode [ 109.978703][ T4802] device bond_slave_1 left promiscuous mode [ 110.138260][ T4810] netlink: 'syz.1.160': attribute type 4 has an invalid length. [ 110.216583][ T4814] netlink: 'syz.1.160': attribute type 4 has an invalid length. [ 110.345070][ T7] lo speed is unknown, defaulting to 1000 [ 110.345114][ T4249] lo speed is unknown, defaulting to 1000 [ 110.437197][ T4817] [ 110.439577][ T4817] ====================================================== [ 110.446614][ T4817] WARNING: possible circular locking dependency detected [ 110.453661][ T4817] syzkaller #0 Not tainted [ 110.458098][ T4817] ------------------------------------------------------ [ 110.465125][ T4817] syz.0.162/4817 is trying to acquire lock: [ 110.471026][ T4817] ffff8880649d8b98 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0 [ 110.481514][ T4817] [ 110.481514][ T4817] but task is already holding lock: [ 110.488905][ T4817] ffff8880649d8ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030 [ 110.492685][ T4824] device syzkaller0 entered promiscuous mode [ 110.498244][ T4817] [ 110.498244][ T4817] which lock already depends on the new lock. [ 110.498244][ T4817] [ 110.498253][ T4817] [ 110.498253][ T4817] the existing dependency chain (in reverse order) is: [ 110.498259][ T4817] [ 110.498259][ T4817] -> #3 (&hdev->req_lock){+.+.}-{3:3}: [ 110.498292][ T4817] __mutex_lock_common+0x1eb/0x2390 [ 110.498319][ T4817] mutex_lock_nested+0x17/0x20 [ 110.498337][ T4817] hci_dev_do_close+0x5f/0x1030 [ 110.498356][ T4817] hci_rfkill_set_block+0x10a/0x190 [ 110.498377][ T4817] rfkill_set_block+0x1c6/0x420 [ 110.498397][ T4817] rfkill_fop_write+0x458/0x560 [ 110.498417][ T4817] vfs_write+0x300/0xd00 [ 110.558977][ T4824] loop1: detected capacity change from 0 to 764 [ 110.561320][ T4817] ksys_write+0x14d/0x250 [ 110.582554][ T4817] do_syscall_64+0x4c/0xa0 [ 110.587528][ T4817] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 110.593977][ T4817] [ 110.593977][ T4817] -> #2 (rfkill_global_mutex){+.+.}-{3:3}: [ 110.601995][ T4817] __mutex_lock_common+0x1eb/0x2390 [ 110.607729][ T4817] mutex_lock_nested+0x17/0x20 [ 110.613023][ T4817] rfkill_register+0x33/0x8a0 [ 110.618235][ T4817] hci_register_dev+0x452/0x970 [ 110.623616][ T4817] vhci_create_device+0x32c/0x5c0 [ 110.629170][ T4817] vhci_write+0x391/0x450 [ 110.634041][ T4817] vfs_write+0x712/0xd00 [ 110.638809][ T4817] ksys_write+0x14d/0x250 [ 110.643661][ T4817] do_syscall_64+0x4c/0xa0 [ 110.648598][ T4817] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 110.655014][ T4817] [ 110.655014][ T4817] -> #1 (&data->open_mutex){+.+.}-{3:3}: [ 110.662829][ T4817] __mutex_lock_common+0x1eb/0x2390 [ 110.668553][ T4817] mutex_lock_nested+0x17/0x20 [ 110.673875][ T4817] vhci_send_frame+0x88/0x100 [ 110.679075][ T4817] hci_send_frame+0x1a9/0x2e0 [ 110.684278][ T4817] hci_tx_work+0x9f9/0x1710 [ 110.689330][ T4817] process_one_work+0x863/0x1000 [ 110.694795][ T4817] worker_thread+0xaa8/0x12a0 [ 110.699996][ T4817] kthread+0x436/0x520 [ 110.704609][ T4817] ret_from_fork+0x1f/0x30 [ 110.709550][ T4817] [ 110.709550][ T4817] -> #0 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 110.718765][ T4817] __lock_acquire+0x2c33/0x7c60 [ 110.724140][ T4817] lock_acquire+0x197/0x3f0 [ 110.729171][ T4817] __flush_work+0xdd/0x1b0 [ 110.734112][ T4817] hci_dev_do_close+0x1e7/0x1030 [ 110.739573][ T4817] hci_rfkill_set_block+0x10a/0x190 [ 110.745311][ T4817] rfkill_set_block+0x1c6/0x420 [ 110.750691][ T4817] rfkill_fop_write+0x458/0x560 [ 110.756062][ T4817] vfs_write+0x300/0xd00 [ 110.760821][ T4817] ksys_write+0x14d/0x250 [ 110.765667][ T4817] do_syscall_64+0x4c/0xa0 [ 110.770603][ T4817] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 110.777017][ T4817] [ 110.777017][ T4817] other info that might help us debug this: [ 110.777017][ T4817] [ 110.787238][ T4817] Chain exists of: [ 110.787238][ T4817] (work_completion)(&hdev->tx_work) --> rfkill_global_mutex --> &hdev->req_lock [ 110.787238][ T4817] [ 110.802181][ T4817] Possible unsafe locking scenario: [ 110.802181][ T4817] [ 110.809628][ T4817] CPU0 CPU1 [ 110.814990][ T4817] ---- ---- [ 110.820347][ T4817] lock(&hdev->req_lock); [ 110.824763][ T4817] lock(rfkill_global_mutex); [ 110.832045][ T4817] lock(&hdev->req_lock); [ 110.838981][ T4817] lock((work_completion)(&hdev->tx_work)); [ 110.844957][ T4817] [ 110.844957][ T4817] *** DEADLOCK *** [ 110.844957][ T4817] [ 110.853103][ T4817] 2 locks held by syz.0.162/4817: [ 110.858118][ T4817] #0: ffffffff8d4bff28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560 [ 110.868219][ T4817] #1: ffff8880649d8ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030 [ 110.877969][ T4817] [ 110.877969][ T4817] stack backtrace: [ 110.883857][ T4817] CPU: 1 PID: 4817 Comm: syz.0.162 Not tainted syzkaller #0 [ 110.891161][ T4817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 110.901231][ T4817] Call Trace: [ 110.904508][ T4817] [ 110.907448][ T4817] dump_stack_lvl+0x168/0x230 [ 110.912146][ T4817] ? load_image+0x3b0/0x3b0 [ 110.916685][ T4817] ? show_regs_print_info+0x20/0x20 [ 110.921893][ T4817] ? print_circular_bug+0x12b/0x1a0 [ 110.927096][ T4817] check_noncircular+0x274/0x310 [ 110.932038][ T4817] ? add_chain_block+0x940/0x940 [ 110.936975][ T4817] ? lockdep_lock+0xdc/0x1e0 [ 110.941582][ T4817] ? mark_lock+0x94/0x320 [ 110.946000][ T4817] __lock_acquire+0x2c33/0x7c60 [ 110.950864][ T4817] ? lockdep_unlock+0x134/0x2d0 [ 110.955721][ T4817] ? lockdep_lock+0x1e0/0x1e0 [ 110.960397][ T4817] ? mark_lock+0x94/0x320 [ 110.964728][ T4817] ? verify_lock_unused+0x140/0x140 [ 110.969932][ T4817] ? __lock_acquire+0x12d9/0x7c60 [ 110.974968][ T4817] lock_acquire+0x197/0x3f0 [ 110.979476][ T4817] ? __flush_work+0xc1/0x1b0 [ 110.984072][ T4817] ? __mutex_trylock_common+0x14f/0x250 [ 110.989622][ T4817] ? read_lock_is_recursive+0x10/0x10 [ 110.995096][ T4817] ? lock_chain_count+0x20/0x20 [ 110.999949][ T4817] ? mark_lock+0x94/0x320 [ 111.004282][ T4817] __flush_work+0xdd/0x1b0 [ 111.008701][ T4817] ? __flush_work+0xc1/0x1b0 [ 111.013292][ T4817] ? flush_work+0x20/0x20 [ 111.017621][ T4817] ? hci_leds_update_powered+0x148/0x160 [ 111.023257][ T4817] ? rcu_lock_release+0x5/0x20 [ 111.028024][ T4817] ? __lock_acquire+0x7c60/0x7c60 [ 111.033059][ T4817] hci_dev_do_close+0x1e7/0x1030 [ 111.037999][ T4817] ? _raw_spin_unlock+0x40/0x40 [ 111.042942][ T4817] hci_rfkill_set_block+0x10a/0x190 [ 111.048145][ T4817] ? rcu_lock_release+0x20/0x20 [ 111.053001][ T4817] rfkill_set_block+0x1c6/0x420 [ 111.057856][ T4817] rfkill_fop_write+0x458/0x560 [ 111.062717][ T4817] ? rfkill_fop_read+0x4b0/0x4b0 [ 111.067655][ T4817] ? common_file_perm+0xd0/0x1c0 [ 111.072596][ T4817] ? fsnotify_perm+0x5d/0x560 [ 111.077275][ T4817] ? security_file_permission+0x75/0xa0 [ 111.082824][ T4817] ? rfkill_fop_read+0x4b0/0x4b0 [ 111.087776][ T4817] vfs_write+0x300/0xd00 [ 111.092111][ T4817] ? file_end_write+0x250/0x250 [ 111.096962][ T4817] ? __fget_files+0x40f/0x480 [ 111.101640][ T4817] ? __fdget_pos+0x1e2/0x370 [ 111.106228][ T4817] ? ksys_write+0x71/0x250 [ 111.110640][ T4817] ksys_write+0x14d/0x250 [ 111.114967][ T4817] ? __ia32_sys_read+0x80/0x80 [ 111.119733][ T4817] ? lockdep_hardirqs_on+0x94/0x140 [ 111.124939][ T4817] do_syscall_64+0x4c/0xa0 [ 111.129447][ T4817] ? clear_bhb_loop+0x30/0x80 [ 111.134124][ T4817] ? clear_bhb_loop+0x30/0x80 [ 111.138804][ T4817] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 111.144715][ T4817] RIP: 0033:0x7f645441abe9 [ 111.149130][ T4817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.168741][ T4817] RSP: 002b:00007f6452661038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 111.177154][ T4817] RAX: ffffffffffffffda RBX: 00007f6454652090 RCX: 00007f645441abe9 [ 111.185128][ T4817] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 111.193101][ T4817] RBP: 00007f645449de19 R08: 0000000000000000 R09: 0000000000000000 [ 111.201079][ T4817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.209051][ T4817] R13: 00007f6454652128 R14: 00007f6454652090 R15: 00007ffe2db527c8 [ 111.217033][ T4817] [ 111.314838][ T4824] ISO 9660 Extensions: Microsoft Joliet Level 0 [ 111.413877][ T4832] EXT4-fs error (device loop3): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.3.156: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 111.434605][ T4832] EXT4-fs (loop3): Remounting filesystem read-only [ 111.441193][ T4832] EXT4-fs error (device loop3) in ext4_delete_entry:2800: Corrupt filesystem [ 111.550664][ T4832] EXT4-fs (loop3): Remounting filesystem read-only [ 111.557586][ T4832] EXT4-fs warning (device loop3): ext4_rename_delete:3792: inode #2: comm syz.3.156: Deleting old file: nlink 5, error=-117 [ 111.686561][ T4824] ISOFS: Interleaved files not (yet) supported. [ 111.695295][ T4824] ISOFS: File unit size != 0 for ISO file (1856). [ 111.718344][ T4824] ISOFS: Interleaved files not (yet) supported. [ 111.753792][ T4824] ISOFS: File unit size != 0 for ISO file (1856). [ 111.814582][ T4824] ISOFS: Interleaved files not (yet) supported. [ 111.820953][ T4824] ISOFS: File unit size != 0 for ISO file (1856). [ 111.950964][ T4824] ISOFS: Interleaved files not (yet) supported. [ 111.980328][ T4824] ISOFS: File unit size != 0 for ISO file (1856). [ 112.024482][ T4824] ISOFS: Interleaved files not (yet) supported. [ 112.046544][ T4824] ISOFS: File unit size != 0 for ISO file (1856). [ 112.057795][ T4824] ISOFS: Interleaved files not (yet) supported. [ 112.076985][ T4824] ISOFS: File unit size != 0 for ISO file (1856). [ 112.083713][ T4824] rock: directory entry would overflow storage [ 112.124298][ T4824] rock: sig=0x4f50, size=4, remaining=3 [ 112.130063][ T4824] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 112.176493][ T4840] ISOFS: Interleaved files not (yet) supported. [ 112.182862][ T4840] ISOFS: File unit size != 0 for ISO file (1856). [ 112.253523][ T4840] device syzkaller0 left promiscuous mode