last executing test programs: 1m27.140647837s ago: executing program 2 (id=99): acct(&(0x7f0000000140)='./file0\x00') fsopen(0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1, 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x90}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r1, &(0x7f0000001280), 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x388c, &(0x7f0000000240)={0x0, 0xf5b9, 0x10100}, &(0x7f0000000100), 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r6, 0x0) connect$unix(r5, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m26.964214016s ago: executing program 2 (id=103): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x800000001fe, 0x226982) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004000000b7030000000000de850000000400000095", @ANYRESDEC=r2, @ANYRESDEC], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) 1m26.702748495s ago: executing program 2 (id=106): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20) 1m25.895356902s ago: executing program 2 (id=109): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$eJzs3c9rI2UYwPEnaZpMumyTgygK0ge96GVoq2c1yC6IAZfuRtwVhNntREPGpMyESERsPXkVb/4DgsseFzwsqP9AL97WixdP9iIIuog4Mr/SJJ00aTZL0/b7gTZP8r7PzPvmF88byJuD9776uFn3zLrVkayhkhEReSRSlqwkMtFFXlLsycuX/nz4/PWbt96uVKtXtlSvVm68sqmqq2s/fPJZMe72oCD75Q8OxPht/+n9Zw/+u/FRw9OGp612Ry293f61Y912bN1ueE1T9ZpjW56tjZZnu1F7O2qvO+2dnZ5are3LKzuu7XlqtXratHvaaWvH7an1odVoqWmaenklbbjnmDFDTu3u1pZVmfGEd2bMw7z94/v+Mc2uW7GWRMzikZba3Sc6LgAAsJBG6v9vkhqhLNl+QZmJ1wL5MB5eBgT1fxKH9X+wWDis/++98FPn0rv3V+P6/0E+rf5/9Zcof6j+D84+9/r/u5HrRyuiM2/3JJ0fq/7HYlgbfkX+frhijwX1f/Bq6K/ov3j/3noYUP8DAAAAAAAAAAAAAAAAAAAAAHAWPPL9ku/7peQy+Tv8CkF8Pbl23BeNceaMe/wL8Y4C/ecDzqXrN2+JEX5xL7cq4nzZrXVr0WXcnnRcl5L8Gz4fYtGGE3thowbK8qOz260txwlL4f+KiIojtmxIScpD+WF89a3qlQ2NRPnh+Xe7tUxuJcivSyPM35SSPJWev5man5eXXhzIN6UkP9+RtjiyHb+PJfmfb6i++U51JL8Y9kvz+pN9SAAAAAAAmDtT1YiXz+Xh9W+0fjdN1bT2YC0vg+vzo58P9NfX66nr81zpudzpzh0AAAAAgIvCy3/atBzHdr3e2KAok/oU4qONNOVkwpGDIDdFn6HgYRgsH9dnaWCG0x45H/+CxrTDcL2eTD3mJPirIKl3ZrKF61CTkX6vThkk85+is3HSh8D1siefu+16a8F4dKbpDATJx0bj+si1WY88Lkh2zp3U+Zmvv/17tlNk4l17B5teu29MmGkYZEZu2ZvwpP3D9yeOZzn93eL7WX5kBgAAAMCCSIr+opfc8sbpDggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAtortukjQlOe44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAovg/AAD//5h69bA=") r1 = creat(&(0x7f0000000280)='./bus\x00', 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r3, &(0x7f0000000000)='2', 0x1, 0x4fed0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000980)="ca", 0x1}], 0x1, 0x10fffff, 0xffffffff, 0x0) r4 = open(&(0x7f0000000200)='./bus\x00', 0x44000, 0x0) finit_module(r4, 0x0, 0x0) 1m25.706966851s ago: executing program 4 (id=112): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f000000000000000000000000000039d1c723"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 1m25.39338368s ago: executing program 2 (id=114): acct(&(0x7f0000000140)='./file0\x00') fsopen(0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1, 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x90}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r1, &(0x7f0000001280), 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x388c, &(0x7f0000000240)={0x0, 0xf5b9, 0x10100}, &(0x7f0000000100), 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r5, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m25.39248189s ago: executing program 4 (id=115): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x202, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0xffffffff, @loopback}, 0x1c) splice(r4, 0x0, r3, 0x0, 0x200000000406f413, 0x8) shutdown(r4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1m25.247583039s ago: executing program 4 (id=117): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffb000/0x2000)=nil) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) setns(0xffffffffffffffff, 0x24020000) setpriority(0x2, 0x0, 0x800) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000090000000000400000000000c1a53d19f036"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1m25.087447089s ago: executing program 4 (id=121): openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r5}, &(0x7f0000000180), &(0x7f0000000200)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20) 1m25.086616798s ago: executing program 2 (id=122): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_clone(0x40b04000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000380), 0x12) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x27) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500040000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) write$cgroup_int(r2, &(0x7f0000000040), 0x1) 1m22.96852555s ago: executing program 4 (id=126): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 1m22.572248329s ago: executing program 4 (id=132): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffeca50000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='kmem_cache_free\x00', r0}, 0x10) unshare(0x40020000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0xffffffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, {0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0x3ff}, r7}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000440)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000240)=0x1, r7, 0x0, 0x2, 0x4}}, 0x20) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[], 0x3c}}, 0x0) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) unshare(0x6020400) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x1}, 0x24}}, 0x0) 1m9.94307734s ago: executing program 32 (id=122): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_clone(0x40b04000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000380), 0x12) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x27) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500040000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) write$cgroup_int(r2, &(0x7f0000000040), 0x1) 1m7.444385711s ago: executing program 33 (id=132): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffeca50000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='kmem_cache_free\x00', r0}, 0x10) unshare(0x40020000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0xffffffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, {0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0x3ff}, r7}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000440)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000240)=0x1, r7, 0x0, 0x2, 0x4}}, 0x20) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[], 0x3c}}, 0x0) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) unshare(0x6020400) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x1}, 0x24}}, 0x0) 6.889686717s ago: executing program 5 (id=453): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000030000000900010073797a310000000020000000020a01040000000000000000000000000900010073797a3000000000340000001f0a030000000000000000000300000008000340000000000900010073797a3100000000090002"], 0x9c}}, 0x48000) 6.639792206s ago: executing program 5 (id=457): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x40}}, 0x0) 6.183757974s ago: executing program 5 (id=460): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x209}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bond_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000240)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}]}}}]}, 0x40}}, 0x0) 6.088728824s ago: executing program 3 (id=464): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 5.902361863s ago: executing program 5 (id=468): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffea4, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) timer_create(0x3, 0x0, &(0x7f00000000c0)=0x0) timer_delete(r2) 3.955771936s ago: executing program 5 (id=471): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x800004, &(0x7f0000000080), 0x1, 0x769, &(0x7f0000000340)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 3.902286366s ago: executing program 6 (id=473): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c96, &(0x7f0000000c00)={[{@test_dummy_encryption}, {@user_xattr}], [{@smackfsroot={'smackfsroot', 0x3d, 'kfree\x00'}}, {@obj_user={'obj_user', 0x3d, 'bpf\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x24000000000000}}, {@obj_user={'obj_user', 0x3d, 'ext4\x00'}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@flag='lazytime'}]}, 0x1, 0x24d, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000500"/20], 0x48) pwrite64(r0, 0x0, 0x0, 0x4fed0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f00000000c0)={0xfffffff3, 0xfffffff8, 0x5, 0x300000}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r3) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x20000000000001d5, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4}, 0x10) sendmsg$NFC_CMD_DEP_LINK_UP(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$KDSKBENT(r2, 0x4b47, 0x0) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f00000002c0)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = dup(r5) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000240)={0x2, {0x2, 0x13d, 0x3c, 0xd6e, 0x4, 0x1}}) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x501}}) 3.901823816s ago: executing program 3 (id=474): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="0c010000", @ANYRES16=r1, @ANYBLOB="010029bd7000fddbdf250700"], 0x10c}, 0x1, 0x0, 0x0, 0x4004}, 0x24000084) 2.921829942s ago: executing program 3 (id=476): r0 = socket$inet(0xa, 0x801, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000009000000000000000020000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 2.803512261s ago: executing program 1 (id=478): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001840)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0xfffeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffca}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0x2, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x6, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x9, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x200, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x7, 0x25, 0x10, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x7, 0x1, 0x82, 0x52e, 0x1, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x0, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x5, 0x5, 0x7, 0x3, 0xd7c5, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xd, 0x7, 0x2, 0x0, 0x6ee1847d, 0x100, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x80, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x8, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x7ff, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x4, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000000, 0xb, 0x7, 0x5, 0x2, 0x79e]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) 2.712203371s ago: executing program 5 (id=479): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12fdff00010000000400f4ff01659a3a31053f2e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c00048048000180080001"], 0x122}}, 0x400c080) unshare(0x64000600) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = msgget(0x2, 0x200) msgctl$IPC_RMID(r2, 0x0) 2.678416561s ago: executing program 1 (id=480): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/32, 0x20}}], 0x56, 0x2, 0x0) 2.5521499s ago: executing program 6 (id=481): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x200000000200}, 0x18) r4 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0xffffffffffffffb6) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r1, 0x30b}, 0x14}}, 0x40000) 2.47321241s ago: executing program 1 (id=482): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x86042, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) creat(&(0x7f00000001c0)='./file0\x00', 0x0) 2.47128499s ago: executing program 3 (id=483): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1a"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") truncate(&(0x7f0000000140)='./file2\x00', 0x5c00) 2.306080689s ago: executing program 0 (id=484): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x804, &(0x7f0000002a80)=ANY=[@ANYRES8=0x0, @ANYRESHEX, @ANYRESDEC], 0xff, 0x313, &(0x7f0000000580)="$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") 2.287948079s ago: executing program 6 (id=485): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0xa, 0x2, 0x1001, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r2, &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x1000, 0x400, 0x0) 2.096284169s ago: executing program 6 (id=486): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@dev, 0x40, 0x0, 0x3, 0x1000, 0xa}, {0xfffffffffffffffe, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0xfffffffd, 0x33}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3, 0x3, 0x7}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 2.051364428s ago: executing program 1 (id=487): r0 = socket$nl_rdma(0x10, 0x3, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[]) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f000000000000000000000000000039d1c723"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) 1.933668638s ago: executing program 0 (id=488): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffb000/0x2000)=nil) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) setpriority(0x2, 0x0, 0x800) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000090000000000400000000000c1a53d19f036"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setitimer(0x2, 0x0, 0x0) 1.532329296s ago: executing program 0 (id=489): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r1}, &(0x7f0000000a00), &(0x7f0000000a40)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f0000000880), &(0x7f00000008c0)=r0}, 0x20) 895.257834ms ago: executing program 3 (id=490): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000c80)='kfree\x00', r1}, 0x18) r2 = inotify_init() r3 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r4 = inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x8c7) write$binfmt_elf32(r3, &(0x7f0000000000)=ANY=[@ANYRES64=r4], 0x69) close(r3) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 686.859523ms ago: executing program 0 (id=491): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_script(r1, 0x0, 0x0) 530.055783ms ago: executing program 6 (id=492): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c96, &(0x7f0000000c00)={[{@test_dummy_encryption}, {@user_xattr}], [{@smackfsroot={'smackfsroot', 0x3d, 'kfree\x00'}}, {@obj_user={'obj_user', 0x3d, 'bpf\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x24000000000000}}, {@obj_user={'obj_user', 0x3d, 'ext4\x00'}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@flag='lazytime'}]}, 0x1, 0x24d, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000500"/20], 0x48) pwrite64(r0, 0x0, 0x0, 0x4fed0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f00000000c0)={0xfffffff3, 0xfffffff8, 0x5, 0x300000}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r3) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x20000000000001d5, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4}, 0x10) sendmsg$NFC_CMD_DEP_LINK_UP(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$KDSKBENT(r2, 0x4b47, 0x0) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f00000002c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000240)={0x2, {0x2, 0x13d, 0x3c, 0xd6e, 0x4, 0x1}}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x501}}) 528.626173ms ago: executing program 1 (id=493): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bind$packet(r3, &(0x7f00000001c0)={0x11, 0xf5, r5, 0x1, 0x0, 0x6, @local}, 0x14) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000140)=0x2) 344.350242ms ago: executing program 3 (id=494): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x21000) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r0, 0x0, 0x0) 344.001992ms ago: executing program 0 (id=495): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000040000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r1, 0x0, 0x8, 0x240440c6, &(0x7f0000000040)={0x2, 0xce21, @empty}, 0x10) 232.523651ms ago: executing program 0 (id=496): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r1, 0x0, 0x10000000000}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x6, 0x6}, 0x3c) 88.65714ms ago: executing program 1 (id=497): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0xfffffffe, 0x7, 0x0, 0x0, 0x19, "90737f0000fbffffffffffffff679495ffffeb"}) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = dup(r0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x5, 0x0, 0xfffe, 0x2, 0x15}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xff) 0s ago: executing program 6 (id=498): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", "5d362ced", "bc3a20b10f4ad11e"}, 0x38) close(r0) kernel console output (not intermixed with test programs): DUID 00:04:e4:c6:50:7c:d0:20:e3:9c:0b:ff:93:a0:6d:15:c2:87 forked to background, child pid 3837 [ 38.403339][ T3838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.417618][ T3838] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.173' (ED25519) to the list of known hosts. syzkaller login: [ 64.454828][ T4156] cgroup: Unknown subsys name 'net' [ 64.563218][ T4156] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.078777][ T4156] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 67.508953][ T4166] chnl_net:caif_netlink_parms(): no params data found [ 67.558707][ T4167] chnl_net:caif_netlink_parms(): no params data found [ 67.645510][ T4168] chnl_net:caif_netlink_parms(): no params data found [ 67.706215][ T4176] chnl_net:caif_netlink_parms(): no params data found [ 67.755992][ T4167] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.763824][ T4167] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.771971][ T4167] device bridge_slave_0 entered promiscuous mode [ 67.810988][ T4167] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.818344][ T4167] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.826389][ T4167] device bridge_slave_1 entered promiscuous mode [ 67.834484][ T4166] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.841641][ T4166] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.849747][ T4166] device bridge_slave_0 entered promiscuous mode [ 67.861275][ T4166] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.868938][ T4166] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.876902][ T4166] device bridge_slave_1 entered promiscuous mode [ 67.925110][ T4174] chnl_net:caif_netlink_parms(): no params data found [ 67.937378][ T4167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.970218][ T4167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.979488][ T4168] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.986760][ T4168] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.995159][ T4168] device bridge_slave_0 entered promiscuous mode [ 68.004577][ T4166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.041987][ T4168] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.049658][ T4168] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.058398][ T4168] device bridge_slave_1 entered promiscuous mode [ 68.067334][ T4166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.084885][ T4176] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.091953][ T4176] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.100818][ T4176] device bridge_slave_0 entered promiscuous mode [ 68.135620][ T4176] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.142888][ T4176] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.150687][ T4176] device bridge_slave_1 entered promiscuous mode [ 68.160639][ T4167] team0: Port device team_slave_0 added [ 68.193762][ T4167] team0: Port device team_slave_1 added [ 68.210247][ T4168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.223233][ T4166] team0: Port device team_slave_0 added [ 68.242717][ T4176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.253514][ T4168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.264170][ T4166] team0: Port device team_slave_1 added [ 68.291680][ T4176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.333140][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.340107][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.366168][ T4167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.396570][ T4168] team0: Port device team_slave_0 added [ 68.403178][ T4174] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.410280][ T4174] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.418362][ T4174] device bridge_slave_0 entered promiscuous mode [ 68.426958][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.434128][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.460144][ T4167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.474140][ T4176] team0: Port device team_slave_0 added [ 68.484783][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.491751][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.518127][ T4166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.530794][ T4168] team0: Port device team_slave_1 added [ 68.536877][ T4174] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.544153][ T4174] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.552105][ T4174] device bridge_slave_1 entered promiscuous mode [ 68.568760][ T4176] team0: Port device team_slave_1 added [ 68.583918][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.590885][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.618258][ T4166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.681616][ T4174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.691310][ T4176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.706024][ T4176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.732240][ T4176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.745735][ T4176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.752816][ T4176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.779330][ T4176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.792169][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.799263][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.825572][ T4168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.848683][ T4167] device hsr_slave_0 entered promiscuous mode [ 68.856048][ T4167] device hsr_slave_1 entered promiscuous mode [ 68.864657][ T4174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.887537][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.894678][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.920637][ T4168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.975538][ T4174] team0: Port device team_slave_0 added [ 69.007066][ T4166] device hsr_slave_0 entered promiscuous mode [ 69.014143][ T4166] device hsr_slave_1 entered promiscuous mode [ 69.020695][ T4166] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.028579][ T4166] Cannot create hsr debugfs directory [ 69.049326][ T4174] team0: Port device team_slave_1 added [ 69.111627][ T4176] device hsr_slave_0 entered promiscuous mode [ 69.118538][ T4176] device hsr_slave_1 entered promiscuous mode [ 69.125415][ T4176] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.133210][ T4176] Cannot create hsr debugfs directory [ 69.160398][ T4168] device hsr_slave_0 entered promiscuous mode [ 69.167583][ T4168] device hsr_slave_1 entered promiscuous mode [ 69.175372][ T2856] Bluetooth: hci1: command 0x0409 tx timeout [ 69.181737][ T4168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.182377][ T2856] Bluetooth: hci0: command 0x0409 tx timeout [ 69.195892][ T4168] Cannot create hsr debugfs directory [ 69.201931][ T4174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.209050][ T4174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.235396][ T4174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.252857][ T2302] Bluetooth: hci4: command 0x0409 tx timeout [ 69.258928][ T2302] Bluetooth: hci3: command 0x0409 tx timeout [ 69.265952][ T2302] Bluetooth: hci2: command 0x0409 tx timeout [ 69.296141][ T4174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.303742][ T4174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.329717][ T4174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.433175][ T4174] device hsr_slave_0 entered promiscuous mode [ 69.439883][ T4174] device hsr_slave_1 entered promiscuous mode [ 69.446915][ T4174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.458322][ T4174] Cannot create hsr debugfs directory [ 69.664611][ T4167] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.682022][ T4167] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.693388][ T4167] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.707923][ T4167] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.752222][ T4166] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.762448][ T4166] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.771760][ T4166] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.789722][ T4166] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.848404][ T4176] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.858034][ T4176] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.886870][ T4176] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.898412][ T4176] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.014457][ T4167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.022122][ T4174] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.035293][ T4166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.042161][ T4174] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.069073][ T4174] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.088571][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.099610][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.108554][ T4174] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.125355][ T1425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.133989][ T1425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.147168][ T4167] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.170876][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.181273][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.190961][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.198366][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.208707][ T4166] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.234617][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.243213][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.252360][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.261495][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.268586][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.278011][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.289056][ T4168] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.302119][ T4168] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.311686][ T4168] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.325074][ T4168] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.338054][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.347179][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.356346][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.363468][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.375704][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.385977][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.395413][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.402825][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.413434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.438150][ T4176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.447312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.466874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.481876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.490188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.503499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.516207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.550397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.559224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.569464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.580029][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.589693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.617119][ T4176] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.624962][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.634793][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.644721][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.654046][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.663595][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.672024][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.681122][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.689699][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.707591][ T4167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.730705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.740299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.749398][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.760700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.769901][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.777020][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.790763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.800272][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.808888][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.815993][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.824009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.843143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.858639][ T4166] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.879280][ T4166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.908536][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.917777][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.926717][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.937874][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.948689][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.958128][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.967669][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.983734][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.012308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.030660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.039456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.048873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.070781][ T4176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.092032][ T4168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.109018][ T4174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.139301][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.149434][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.170898][ T4167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.181116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.194655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.218370][ T4168] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.245542][ T4174] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.254058][ T4209] Bluetooth: hci0: command 0x041b tx timeout [ 71.260512][ T4209] Bluetooth: hci1: command 0x041b tx timeout [ 71.285745][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.300227][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.308612][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.317932][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.327723][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.333241][ T4206] Bluetooth: hci2: command 0x041b tx timeout [ 71.334858][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.350623][ T4206] Bluetooth: hci3: command 0x041b tx timeout [ 71.354109][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.357950][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.363257][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.373497][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.378701][ T4210] Bluetooth: hci4: command 0x041b tx timeout [ 71.393279][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.400359][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.412135][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.423469][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.455842][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.465483][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.476200][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.486728][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.495909][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.503019][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.511015][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.518595][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.526436][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.535007][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.544000][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.552192][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.560528][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.574497][ T4166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.596978][ T4167] device veth0_vlan entered promiscuous mode [ 71.605189][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.615627][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.627487][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.636113][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.643218][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.650905][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.660361][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.669705][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.679242][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.690974][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.721945][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.730081][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.741097][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.750727][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.759810][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.769441][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.778114][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.786874][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.796150][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.830650][ T4176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.848511][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.859168][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.868646][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.878643][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.888334][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.897652][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.919957][ T4167] device veth1_vlan entered promiscuous mode [ 71.931772][ T4168] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.949960][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.965928][ T4174] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.986383][ T4174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.999938][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.008942][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.017412][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.026853][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.035501][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.045011][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.055514][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.066187][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.075761][ T4166] device veth0_vlan entered promiscuous mode [ 72.107461][ T4166] device veth1_vlan entered promiscuous mode [ 72.152419][ T4167] device veth0_macvtap entered promiscuous mode [ 72.180539][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.194305][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.208797][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.238809][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.248039][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.261396][ T4167] device veth1_macvtap entered promiscuous mode [ 72.287441][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.319105][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.343795][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.365414][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.388254][ T4166] device veth0_macvtap entered promiscuous mode [ 72.397029][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.405628][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.414857][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.426020][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.435213][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.457722][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.476971][ T4166] device veth1_macvtap entered promiscuous mode [ 72.485232][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.494093][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.501592][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.509479][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.517324][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.525071][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.537318][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.548286][ T4174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.558375][ T4167] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.568522][ T4167] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.577473][ T4167] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.586923][ T4167] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.604790][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.614896][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.628238][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.654853][ T4176] device veth0_vlan entered promiscuous mode [ 72.678338][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.687465][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.697776][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.708250][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.755836][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.769005][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.781564][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.796902][ T4176] device veth1_vlan entered promiscuous mode [ 72.806178][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.815141][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.825280][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.834028][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.844190][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.852107][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.878284][ T4174] device veth0_vlan entered promiscuous mode [ 72.906780][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.917996][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.929655][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.938527][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.947719][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.957184][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.966296][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.000845][ T4176] device veth0_macvtap entered promiscuous mode [ 73.018513][ T4166] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.028355][ T4166] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.037662][ T4166] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.048077][ T4166] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.064582][ T4174] device veth1_vlan entered promiscuous mode [ 73.071515][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.080877][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.090308][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.099676][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.110317][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.118968][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.137855][ T4176] device veth1_macvtap entered promiscuous mode [ 73.163469][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.171627][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.181730][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.190043][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.228505][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.229715][ T4168] device veth0_vlan entered promiscuous mode [ 73.243342][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.259075][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.270212][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.280172][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.290636][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.302264][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.317255][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.329308][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.333013][ T4211] Bluetooth: hci1: command 0x040f tx timeout [ 73.339624][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.349517][ T4211] Bluetooth: hci0: command 0x040f tx timeout [ 73.379047][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.391762][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.405756][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.416591][ T4211] Bluetooth: hci3: command 0x040f tx timeout [ 73.417050][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.429601][ T4211] Bluetooth: hci2: command 0x040f tx timeout [ 73.433689][ T4209] Bluetooth: hci4: command 0x040f tx timeout [ 73.441755][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.456721][ T4168] device veth1_vlan entered promiscuous mode [ 73.468158][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.477373][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.487294][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.499567][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.508762][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.520502][ T4174] device veth0_macvtap entered promiscuous mode [ 73.535986][ T4176] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.545876][ T4176] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.556738][ T4176] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.565735][ T4176] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.599937][ T4174] device veth1_macvtap entered promiscuous mode [ 73.630536][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.640279][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.645877][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.657902][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.668526][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.676851][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.696921][ T4168] device veth0_macvtap entered promiscuous mode [ 73.710715][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.719791][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.725146][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.735009][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.752347][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.770546][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.780700][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.791195][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.801278][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.811962][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.826699][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.856554][ T4168] device veth1_macvtap entered promiscuous mode [ 73.867332][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.879290][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.887653][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.896206][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.907857][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.941560][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.958933][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.970466][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.981909][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.992448][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.006667][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.018780][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.035078][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.047363][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.060370][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.073855][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.089968][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.102311][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.113240][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.124179][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.138696][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.157143][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.169110][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.174065][ T4242] loop1: detected capacity change from 0 to 512 [ 74.182923][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.192842][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.204044][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.216422][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.226686][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.237489][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.247656][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.258538][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.269279][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.280162][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.291831][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.300973][ T4242] ======================================================= [ 74.300973][ T4242] WARNING: The mand mount option has been deprecated and [ 74.300973][ T4242] and is ignored by this kernel. Remove the mand [ 74.300973][ T4242] option from the mount to silence this warning. [ 74.300973][ T4242] ======================================================= [ 74.343238][ T4174] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.352065][ T4174] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.360964][ T4174] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.372657][ T4174] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.401715][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.409998][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.411115][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.429719][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.431112][ T4242] EXT4-fs (loop1): orphan cleanup on readonly fs [ 74.444282][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.452685][ T4242] Quota error (device loop1): find_tree_dqentry: Getting block too big (196613 >= 6) [ 74.463153][ T4242] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 74.467550][ T4168] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.473036][ T4242] EXT4-fs error (device loop1): ext4_acquire_dquot:6197: comm syz.1.2: Failed to acquire dquot type 1 [ 74.487278][ T4168] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.502066][ T4168] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.513634][ T4242] EXT4-fs (loop1): 1 truncate cleaned up [ 74.516968][ T4168] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.531391][ T4242] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 74.657422][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.679685][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.712697][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.747183][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.761132][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.804317][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.807459][ T4248] loop3: detected capacity change from 0 to 512 [ 74.845985][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.857806][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.894754][ T4248] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 74.912362][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.951044][ T1425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.965442][ T1425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.006683][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.030552][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.049824][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.055877][ T1425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.060857][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.124717][ T1425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.134304][ T4248] Quota error (device loop3): v2_read_file_info: Number of blocks too big for quota file size (1099511633920 > 6144). [ 75.136445][ T1425] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.167903][ T4248] EXT4-fs warning (device loop3): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 75.190036][ T4248] EXT4-fs (loop3): mount failed [ 75.374319][ T4257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 75.414079][ T4244] Bluetooth: hci0: command 0x0419 tx timeout [ 75.420197][ T4244] Bluetooth: hci1: command 0x0419 tx timeout [ 75.458403][ T4258] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 75.907628][ T4262] lo speed is unknown, defaulting to 1000 [ 75.914385][ T4262] lo speed is unknown, defaulting to 1000 [ 75.929596][ T4262] lo speed is unknown, defaulting to 1000 [ 75.959616][ T4262] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 76.006557][ T4262] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 76.319759][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 76.385140][ T4263] device wireguard0 entered promiscuous mode [ 76.411949][ T4265] loop2: detected capacity change from 0 to 1024 [ 76.421829][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 76.428360][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 76.465473][ T4262] lo speed is unknown, defaulting to 1000 [ 76.472971][ T4262] lo speed is unknown, defaulting to 1000 [ 76.479917][ T4262] lo speed is unknown, defaulting to 1000 [ 76.486751][ T4262] lo speed is unknown, defaulting to 1000 [ 76.511837][ T4262] lo speed is unknown, defaulting to 1000 [ 76.520104][ T4262] lo speed is unknown, defaulting to 1000 [ 76.673096][ T4272] process 'syz.3.9' launched './file1' with NULL argv: empty string added [ 76.791722][ T4265] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 76.799146][ T4272] loop3: detected capacity change from 0 to 512 [ 76.806579][ T4265] EXT4-fs (loop2): orphan cleanup on readonly fs [ 77.865979][ T4265] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 77.929693][ T4265] EXT4-fs (loop2): Remounting filesystem read-only [ 77.976628][ T4265] EXT4-fs error (device loop2): ext4_dirty_inode:6010: inode #3: comm syz.2.3: mark_inode_dirty error [ 77.989481][ T4281] loop4: detected capacity change from 0 to 2048 [ 77.998887][ T4265] EXT4-fs (loop2): Remounting filesystem read-only [ 78.012345][ T4272] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 78.026581][ T4265] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.3: Invalid block bitmap block 3 in block_group 0 [ 78.027175][ T4279] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10'. [ 78.062720][ T4272] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.125968][ T4265] EXT4-fs (loop2): Remounting filesystem read-only [ 78.134786][ T4265] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 78.154864][ T4265] EXT4-fs (loop2): Remounting filesystem read-only [ 78.162314][ T4265] EXT4-fs error (device loop2): ext4_dirty_inode:6010: inode #3: comm syz.2.3: mark_inode_dirty error [ 78.265848][ T4265] EXT4-fs (loop2): Remounting filesystem read-only [ 78.280131][ T4265] Quota error (device loop2): write_blk: dquota write failed [ 78.317577][ T4281] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 78.376349][ T4265] EXT4-fs error (device loop2): ext4_map_blocks:628: inode #3: block 1: comm syz.2.3: lblock 6 mapped to illegal pblock 1 (length 1) [ 78.421841][ T4265] EXT4-fs (loop2): Remounting filesystem read-only [ 78.469958][ T26] audit: type=1800 audit(1738464949.852:2): pid=4281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.11" name="bus" dev="loop4" ino=19 res=0 errno=0 [ 78.489924][ C0] vkms_vblank_simulate: vblank timer overrun [ 78.519224][ T4265] Quota error (device loop2): write_blk: dquota write failed [ 78.541204][ T4265] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 78.556833][ T4265] EXT4-fs error (device loop2): ext4_map_blocks:628: inode #3: block 48: comm syz.2.3: lblock 0 mapped to illegal pblock 48 (length 1) [ 78.590601][ T4281] syz.4.11[4281] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.590761][ T4281] syz.4.11[4281] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.624781][ T4265] EXT4-fs (loop2): Remounting filesystem read-only [ 78.685648][ T4265] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 78.706543][ T4265] EXT4-fs error (device loop2): ext4_acquire_dquot:6197: comm syz.2.3: Failed to acquire dquot type 0 [ 78.734455][ T4265] EXT4-fs (loop2): Remounting filesystem read-only [ 78.745845][ T4265] EXT4-fs error (device loop2): ext4_map_blocks:628: inode #3: block 49: comm syz.2.3: lblock 1 mapped to illegal pblock 49 (length 1) [ 78.844871][ T4311] loop3: detected capacity change from 0 to 512 [ 78.962301][ T4265] EXT4-fs (loop2): Remounting filesystem read-only [ 79.026420][ T4265] Quota error (device loop2): do_insert_tree: Can't read tree quota block 1 [ 79.195834][ T4265] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 79.234120][ T4311] EXT4-fs (loop3): orphan cleanup on readonly fs [ 79.249644][ T4311] EXT4-fs error (device loop3): ext4_acquire_dquot:6197: comm syz.3.14: Failed to acquire dquot type 1 [ 79.270906][ T4311] EXT4-fs (loop3): 1 truncate cleaned up [ 79.284317][ T4311] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 79.982384][ T4265] EXT4-fs error (device loop2): ext4_acquire_dquot:6197: comm syz.2.3: Failed to acquire dquot type 0 [ 80.045024][ T4265] EXT4-fs (loop2): Remounting filesystem read-only [ 80.051714][ T4265] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 80.062477][ C1] sched: RT throttling activated [ 80.088031][ T4265] EXT4-fs (loop2): Remounting filesystem read-only [ 80.094737][ T4265] EXT4-fs error (device loop2): ext4_evict_inode:282: inode #15: comm syz.2.3: mark_inode_dirty error [ 80.182544][ T4265] EXT4-fs (loop2): Remounting filesystem read-only [ 80.228568][ T4265] EXT4-fs warning (device loop2): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 80.342893][ T4265] EXT4-fs (loop2): 1 orphan inode deleted [ 80.368015][ T4321] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 80.396557][ T4322] loop4: detected capacity change from 0 to 128 [ 80.403270][ T4265] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000008,data_err=abort,minixdf,errors=remount-ro,abort,noblock_validity,barrier,journal_dev=0x0000000000000f35,. Quota mode: none. [ 80.438987][ T4317] lo speed is unknown, defaulting to 1000 [ 80.594081][ T4265] syz.2.3 (4265) used greatest stack depth: 18720 bytes left [ 81.428207][ T4333] lo speed is unknown, defaulting to 1000 [ 81.544181][ T4334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21'. [ 81.584075][ T7] cfg80211: failed to load regulatory.db [ 81.601055][ T4334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.622874][ T4334] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.632227][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 81.632242][ T26] audit: type=1804 audit(1738464953.012:3): pid=4340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.15" name="/newroot/3/file0/bus" dev="loop4" ino=1048590 res=1 errno=0 [ 81.681322][ T4334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.695442][ T4334] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.717154][ T26] audit: type=1800 audit(1738464953.062:4): pid=4340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.15" name="bus" dev="loop4" ino=1048590 res=0 errno=0 [ 81.736662][ T4322] attempt to access beyond end of device [ 81.736662][ T4322] loop4: rw=2049, want=1017, limit=128 [ 81.828934][ T4232] attempt to access beyond end of device [ 81.828934][ T4232] loop4: rw=1, want=1041, limit=128 [ 82.020566][ T4346] loop4: detected capacity change from 0 to 128 [ 82.192428][ T4346] EXT4-fs (loop4): Test dummy encryption mode enabled [ 82.210556][ T4346] EXT4-fs (loop4): Unrecognized mount option "smackfsroot=kfree" or missing value [ 82.470035][ T4365] syz.2.30 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 82.572608][ T4360] lo speed is unknown, defaulting to 1000 [ 82.766482][ T26] audit: type=1326 audit(1738464954.152:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4374 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dfb51dda9 code=0x7ffc0000 [ 82.818994][ T4377] netlink: 'syz.4.34': attribute type 7 has an invalid length. [ 82.834684][ T26] audit: type=1326 audit(1738464954.182:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4374 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9dfb51dda9 code=0x7ffc0000 [ 82.882066][ T4379] loop2: detected capacity change from 0 to 512 [ 82.926040][ T26] audit: type=1326 audit(1738464954.182:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4374 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dfb51dda9 code=0x7ffc0000 [ 82.962198][ T26] audit: type=1326 audit(1738464954.182:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4374 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9dfb51dda9 code=0x7ffc0000 [ 83.003355][ T4379] EXT4-fs (loop2): Ignoring removed orlov option [ 83.042076][ T26] audit: type=1326 audit(1738464954.192:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4374 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dfb51dda9 code=0x7ffc0000 [ 83.065630][ T26] audit: type=1326 audit(1738464954.192:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4374 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9dfb51dda9 code=0x7ffc0000 [ 83.071627][ T4379] EXT4-fs (loop2): orphan cleanup on readonly fs [ 83.088648][ T26] audit: type=1326 audit(1738464954.192:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4374 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dfb51dda9 code=0x7ffc0000 [ 83.118117][ T26] audit: type=1326 audit(1738464954.192:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4374 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9dfb51dda9 code=0x7ffc0000 [ 83.155912][ T4384] syz.4.38 uses obsolete (PF_INET,SOCK_PACKET) [ 83.182109][ T4379] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.36: bg 0: block 248: padding at end of block bitmap is not set [ 83.206706][ T4379] EXT4-fs error (device loop2): ext4_acquire_dquot:6197: comm syz.2.36: Failed to acquire dquot type 1 [ 83.224548][ T4379] EXT4-fs (loop2): 1 truncate cleaned up [ 83.230820][ T4379] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,orlov,abort,nombcache,usrjquota=,,errors=continue. Quota mode: writeback. [ 83.929390][ T4392] lo speed is unknown, defaulting to 1000 [ 84.066479][ T4389] lo speed is unknown, defaulting to 1000 [ 84.088864][ T4379] EXT4-fs (loop2): Ignoring removed orlov option [ 84.118135][ T4379] EXT4-fs error (device loop2): ext4_remount:5855: comm syz.2.36: Abort forced by user [ 84.768323][ T4423] siw: device registration error -23 [ 85.401216][ T4420] lo speed is unknown, defaulting to 1000 [ 86.053018][ T4441] lo speed is unknown, defaulting to 1000 [ 86.997032][ T4457] lo speed is unknown, defaulting to 1000 [ 87.337039][ T4472] lo speed is unknown, defaulting to 1000 [ 87.404790][ T4474] siw: device registration error -23 [ 88.864355][ T4507] lo speed is unknown, defaulting to 1000 [ 88.985366][ T4514] siw: device registration error -23 [ 90.020420][ T4523] lo speed is unknown, defaulting to 1000 [ 91.336997][ T4554] lo speed is unknown, defaulting to 1000 [ 92.496853][ T4583] loop2: detected capacity change from 0 to 128 [ 92.728473][ T4583] attempt to access beyond end of device [ 92.728473][ T4583] loop2: rw=2049, want=753, limit=128 [ 92.760425][ T4591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.107'. [ 92.769368][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 92.769384][ T26] audit: type=1804 audit(1738464964.142:16): pid=4583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.109" name="/newroot/20/file0/bus" dev="loop2" ino=1048592 res=1 errno=0 [ 92.814545][ T4579] lo speed is unknown, defaulting to 1000 [ 92.826036][ T4595] siw: device registration error -23 [ 92.826190][ T26] audit: type=1800 audit(1738464964.142:17): pid=4583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.109" name="bus" dev="loop2" ino=1048592 res=0 errno=0 [ 92.859445][ T4312] attempt to access beyond end of device [ 92.859445][ T4312] loop2: rw=1, want=1041, limit=128 [ 93.186826][ T4613] loop3: detected capacity change from 0 to 128 [ 93.437989][ T4613] EXT4-fs (loop3): Test dummy encryption mode enabled [ 94.696850][ T4623] lo speed is unknown, defaulting to 1000 [ 94.767102][ T4613] EXT4-fs (loop3): Unrecognized mount option "smackfsroot=kfree" or missing value [ 95.146333][ T4619] lo speed is unknown, defaulting to 1000 [ 95.325243][ T4633] loop1: detected capacity change from 0 to 128 [ 95.505341][ T4642] siw: device registration error -23 [ 95.576434][ T4633] attempt to access beyond end of device [ 95.576434][ T4633] loop1: rw=2049, want=841, limit=128 [ 95.622571][ T26] audit: type=1804 audit(1738464967.002:18): pid=4633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.125" name="/newroot/28/file0/bus" dev="loop1" ino=1048594 res=1 errno=0 [ 95.648716][ T26] audit: type=1800 audit(1738464967.002:19): pid=4633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.125" name="bus" dev="loop1" ino=1048594 res=0 errno=0 [ 95.765079][ T4648] lo speed is unknown, defaulting to 1000 [ 95.857934][ T4313] attempt to access beyond end of device [ 95.857934][ T4313] loop1: rw=1, want=833, limit=128 [ 95.918367][ T4313] attempt to access beyond end of device [ 95.918367][ T4313] loop1: rw=1, want=817, limit=128 [ 95.936541][ T4313] attempt to access beyond end of device [ 95.936541][ T4313] loop1: rw=1, want=1041, limit=128 [ 96.075559][ T4649] netlink: 4 bytes leftover after parsing attributes in process `syz.4.132'. [ 97.614142][ T4666] loop3: detected capacity change from 0 to 512 [ 97.724364][ T4671] lo speed is unknown, defaulting to 1000 [ 97.852928][ T4666] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 97.876470][ T4666] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.976902][ T4685] loop3: detected capacity change from 0 to 128 [ 99.097653][ T4685] attempt to access beyond end of device [ 99.097653][ T4685] loop3: rw=2049, want=753, limit=128 [ 99.132437][ T26] audit: type=1804 audit(1738464970.512:20): pid=4685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.142" name="/newroot/27/file0/bus" dev="loop3" ino=1048596 res=1 errno=0 [ 99.157349][ T26] audit: type=1800 audit(1738464970.522:21): pid=4685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.142" name="bus" dev="loop3" ino=1048596 res=0 errno=0 [ 99.182506][ T4313] attempt to access beyond end of device [ 99.182506][ T4313] loop3: rw=1, want=1041, limit=128 [ 101.512693][ T4714] lo speed is unknown, defaulting to 1000 [ 101.951314][ T4724] loop3: detected capacity change from 0 to 512 [ 102.017458][ T4731] siw: device registration error -23 [ 102.710060][ T4724] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 102.790192][ T4724] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.808708][ T4737] loop1: detected capacity change from 0 to 128 [ 103.008256][ T4737] attempt to access beyond end of device [ 103.008256][ T4737] loop1: rw=2049, want=913, limit=128 [ 103.222005][ T4515] attempt to access beyond end of device [ 103.222005][ T4515] loop1: rw=1, want=609, limit=128 [ 103.244045][ T4515] attempt to access beyond end of device [ 103.244045][ T4515] loop1: rw=1, want=625, limit=128 [ 103.297580][ T4515] attempt to access beyond end of device [ 103.297580][ T4515] loop1: rw=1, want=641, limit=128 [ 103.315726][ T4515] attempt to access beyond end of device [ 103.315726][ T4515] loop1: rw=1, want=657, limit=128 [ 103.385201][ T4515] attempt to access beyond end of device [ 103.385201][ T4515] loop1: rw=1, want=673, limit=128 [ 103.444348][ T4515] attempt to access beyond end of device [ 103.444348][ T4515] loop1: rw=1, want=689, limit=128 [ 103.507954][ T4515] attempt to access beyond end of device [ 103.507954][ T4515] loop1: rw=1, want=705, limit=128 [ 106.445330][ T4765] siw: device registration error -23 [ 107.048278][ T4768] loop3: detected capacity change from 0 to 512 [ 107.174752][ T4768] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 107.192959][ T4768] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.243066][ T4778] loop0: detected capacity change from 0 to 128 [ 107.380428][ T4778] handle_bad_sector: 33 callbacks suppressed [ 107.380450][ T4778] attempt to access beyond end of device [ 107.380450][ T4778] loop0: rw=2049, want=753, limit=128 [ 107.513381][ T4232] attempt to access beyond end of device [ 107.513381][ T4232] loop0: rw=1, want=1041, limit=128 [ 109.080609][ T4803] siw: device registration error -23 [ 109.157097][ T4803] device wireguard0 entered promiscuous mode [ 109.442022][ T4808] loop1: detected capacity change from 0 to 512 [ 109.725772][ T4808] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 109.743049][ T4808] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.897409][ T4823] loop0: detected capacity change from 0 to 128 [ 110.125257][ T4815] lo speed is unknown, defaulting to 1000 [ 111.134343][ T4574] attempt to access beyond end of device [ 111.134343][ T4574] loop0: rw=1, want=801, limit=128 [ 111.207736][ T4574] attempt to access beyond end of device [ 111.207736][ T4574] loop0: rw=1, want=633, limit=128 [ 111.219187][ T4574] attempt to access beyond end of device [ 111.219187][ T4574] loop0: rw=1, want=1041, limit=128 [ 111.589883][ T4844] loop1: detected capacity change from 0 to 128 [ 111.864266][ T4844] EXT4-fs (loop1): Test dummy encryption mode enabled [ 112.051981][ T4844] EXT4-fs (loop1): Unrecognized mount option "smackfsroot=kfree" or missing value [ 112.124599][ T4594] Bluetooth: hci5: command 0x0409 tx timeout [ 112.396163][ T4815] chnl_net:caif_netlink_parms(): no params data found [ 112.730218][ T4815] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.742343][ T4855] loop0: detected capacity change from 0 to 512 [ 112.743691][ T4815] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.765750][ T4815] device bridge_slave_0 entered promiscuous mode [ 112.841330][ T4815] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.861193][ T4815] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.889152][ T4815] device bridge_slave_1 entered promiscuous mode [ 112.911011][ T4855] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 112.937095][ T4855] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.973851][ T4846] lo speed is unknown, defaulting to 1000 [ 113.113648][ T4815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.129274][ T4815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.269353][ T4815] team0: Port device team_slave_0 added [ 115.111682][ T4590] Bluetooth: hci5: command 0x041b tx timeout [ 115.119048][ T4590] Bluetooth: hci1: command 0x0409 tx timeout [ 115.386691][ T4815] team0: Port device team_slave_1 added [ 115.873136][ T4894] loop3: detected capacity change from 0 to 128 [ 116.116325][ T4313] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.199117][ T4815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.228812][ T4815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.267835][ T4815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.283931][ T4815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.291117][ T4815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.320645][ T4815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.404194][ T26] audit: type=1804 audit(1738464987.792:22): pid=4902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.208" name="/newroot/48/file0/bus" dev="loop3" ino=1048604 res=1 errno=0 [ 116.404824][ T4846] chnl_net:caif_netlink_parms(): no params data found [ 116.462936][ T26] audit: type=1800 audit(1738464987.792:23): pid=4902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.208" name="bus" dev="loop3" ino=1048604 res=0 errno=0 [ 116.480382][ T4894] attempt to access beyond end of device [ 116.480382][ T4894] loop3: rw=2049, want=753, limit=128 [ 116.498836][ T4313] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.676200][ T4313] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.478717][ T4206] Bluetooth: hci1: command 0x041b tx timeout [ 117.488580][ T4815] device hsr_slave_0 entered promiscuous mode [ 117.495325][ T4206] Bluetooth: hci5: command 0x040f tx timeout [ 117.511666][ T4815] device hsr_slave_1 entered promiscuous mode [ 117.518733][ T4815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 117.526455][ T4815] Cannot create hsr debugfs directory [ 117.677434][ T4313] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.831950][ T4923] loop1: detected capacity change from 0 to 512 [ 117.902854][ T4846] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.934674][ T4846] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.015922][ T4923] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 118.030843][ T4846] device bridge_slave_0 entered promiscuous mode [ 118.038496][ T4923] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.056787][ T4846] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.081518][ T4846] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.249704][ T4846] device bridge_slave_1 entered promiscuous mode [ 119.172946][ T4952] loop0: detected capacity change from 0 to 128 [ 119.630359][ T4846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.704752][ T4593] Bluetooth: hci5: command 0x0419 tx timeout [ 119.727692][ T4593] Bluetooth: hci1: command 0x040f tx timeout [ 119.935858][ T4313] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.985114][ T26] audit: type=1804 audit(1738464991.372:24): pid=4954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.224" name="/newroot/59/file0/bus" dev="loop0" ino=1048606 res=1 errno=0 [ 120.020760][ T4846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.029643][ T4952] attempt to access beyond end of device [ 120.029643][ T4952] loop0: rw=2049, want=753, limit=128 [ 120.057545][ T26] audit: type=1800 audit(1738464991.372:25): pid=4954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.224" name="bus" dev="loop0" ino=1048606 res=0 errno=0 [ 120.125369][ T4313] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.210819][ T4313] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.248250][ T4846] team0: Port device team_slave_0 added [ 120.298359][ T4846] team0: Port device team_slave_1 added [ 120.336809][ T4313] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.412050][ T4846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.566542][ T4846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.606430][ T4846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.980122][ T4976] siw: device registration error -23 [ 121.753352][ T4846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.760334][ T4846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.851476][ T4986] loop1: detected capacity change from 0 to 512 [ 121.858644][ T4846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.893172][ T4594] Bluetooth: hci1: command 0x0419 tx timeout [ 122.044889][ T4986] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 122.063718][ T4986] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.284719][ T4846] device hsr_slave_0 entered promiscuous mode [ 122.472401][ T4846] device hsr_slave_1 entered promiscuous mode [ 122.791201][ T4846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.850106][ T4846] Cannot create hsr debugfs directory [ 123.070919][ T5019] loop3: detected capacity change from 0 to 128 [ 123.219399][ T4815] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 123.346737][ T4815] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 123.358332][ T5019] attempt to access beyond end of device [ 123.358332][ T5019] loop3: rw=2049, want=753, limit=128 [ 123.384973][ T26] audit: type=1804 audit(1738464994.772:26): pid=5019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.238" name="/newroot/58/file0/bus" dev="loop3" ino=1048608 res=1 errno=0 [ 123.442583][ T26] audit: type=1800 audit(1738464994.792:27): pid=5019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.238" name="bus" dev="loop3" ino=1048608 res=0 errno=0 [ 123.467095][ T4815] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 123.595596][ T4815] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 125.048174][ T5058] device wireguard0 entered promiscuous mode [ 125.597107][ T5056] loop0: detected capacity change from 0 to 512 [ 125.695665][ T5056] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 125.823713][ T5056] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.858733][ T4846] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 126.694370][ T4846] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 126.778148][ T4846] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 126.834428][ T4846] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 126.903979][ T4815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.029399][ T4815] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.118454][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 127.191738][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 127.222451][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 127.253443][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 127.299980][ T4572] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.307164][ T4572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.212754][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 128.236895][ T4914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 128.283312][ T4914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 128.299382][ T5106] loop3: detected capacity change from 0 to 128 [ 128.333626][ T4914] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.340753][ T4914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.481952][ T4914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 128.485575][ T5106] attempt to access beyond end of device [ 128.485575][ T5106] loop3: rw=2049, want=753, limit=128 [ 128.506950][ T4914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 128.536983][ T4914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 128.558064][ T4914] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 128.599309][ T5106] attempt to access beyond end of device [ 128.599309][ T5106] loop3: rw=2049, want=1041, limit=128 [ 128.642979][ T26] audit: type=1804 audit(1738464999.972:28): pid=5106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.255" name="/newroot/63/file0/bus" dev="loop3" ino=1048610 res=1 errno=0 [ 128.721001][ T4914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 128.780099][ T26] audit: type=1800 audit(1738464999.972:29): pid=5106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.255" name="bus" dev="loop3" ino=1048610 res=0 errno=0 [ 128.788946][ T4914] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 128.866635][ T5124] siw: device registration error -23 [ 129.545641][ T5121] loop1: detected capacity change from 0 to 512 [ 129.594354][ T4914] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 129.607597][ T4914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 129.639700][ T4914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 129.883197][ T4846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.894367][ T5121] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 129.895818][ T4815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 130.009955][ T5121] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.087160][ T4815] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 130.655581][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 130.696209][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 130.725095][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 130.757413][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 131.017206][ T4846] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.103797][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 131.123479][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 131.143358][ T5125] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.150478][ T5125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.320328][ T5167] loop1: detected capacity change from 0 to 128 [ 131.368706][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 131.378728][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 131.388124][ T5125] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.395273][ T5125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.402751][ T5167] EXT4-fs (loop1): Test dummy encryption mode enabled [ 131.403536][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 131.419772][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 131.427352][ T5167] EXT4-fs (loop1): Unrecognized mount option "smackfsroot=kfree" or missing value [ 132.282987][ T1425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 132.411270][ T4846] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 132.435850][ T4846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 132.504260][ T4914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 132.537251][ T4914] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 132.618504][ T5186] siw: device registration error -23 [ 132.680813][ T4914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 132.780046][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.789887][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.959519][ T4914] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 133.331402][ T4914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 133.365306][ T4914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 133.443641][ T4914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 133.463469][ T4914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 133.483374][ T4914] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 133.506684][ T4914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 133.559815][ T4815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.610373][ T5192] loop3: detected capacity change from 0 to 512 [ 133.715734][ T4914] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 133.751197][ T4914] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 133.769315][ T5192] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 133.791047][ T5192] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.143177][ T1425] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 134.150754][ T1425] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 134.186479][ T4846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.429376][ T5227] loop1: detected capacity change from 0 to 128 [ 135.388482][ T26] audit: type=1804 audit(1738465006.742:30): pid=5237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.277" name="/newroot/74/file0/bus" dev="loop1" ino=1048612 res=1 errno=0 [ 136.024580][ T144] attempt to access beyond end of device [ 136.024580][ T144] loop1: rw=1048577, want=337, limit=128 [ 136.058267][ T26] audit: type=1800 audit(1738465006.742:31): pid=5237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.277" name="bus" dev="loop1" ino=1048612 res=0 errno=0 [ 136.115188][ T4815] device veth0_vlan entered promiscuous mode [ 136.137167][ T144] attempt to access beyond end of device [ 136.137167][ T144] loop1: rw=1048577, want=353, limit=128 [ 136.193444][ T4815] device veth1_vlan entered promiscuous mode [ 136.210361][ T144] attempt to access beyond end of device [ 136.210361][ T144] loop1: rw=1048577, want=369, limit=128 [ 136.293335][ T144] attempt to access beyond end of device [ 136.293335][ T144] loop1: rw=1048577, want=385, limit=128 [ 136.377229][ T144] attempt to access beyond end of device [ 136.377229][ T144] loop1: rw=1048577, want=401, limit=128 [ 136.391962][ T1425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 136.405872][ T1425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 136.426854][ T144] attempt to access beyond end of device [ 136.426854][ T144] loop1: rw=1048577, want=417, limit=128 [ 136.454251][ T1425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 136.470727][ T144] attempt to access beyond end of device [ 136.470727][ T144] loop1: rw=1048577, want=433, limit=128 [ 136.483231][ T1425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 136.511834][ T1425] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 136.533611][ T144] attempt to access beyond end of device [ 136.533611][ T144] loop1: rw=1048577, want=449, limit=128 [ 136.561145][ T1425] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 136.570784][ T144] attempt to access beyond end of device [ 136.570784][ T144] loop1: rw=1048577, want=465, limit=128 [ 136.594103][ T1425] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 136.601587][ T144] attempt to access beyond end of device [ 136.601587][ T144] loop1: rw=1048577, want=481, limit=128 [ 136.623888][ T1425] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 136.765590][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 136.809825][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 136.876220][ T5271] siw: device registration error -23 [ 136.914492][ T4815] device veth0_macvtap entered promiscuous mode [ 137.654629][ T4815] device veth1_macvtap entered promiscuous mode [ 137.731435][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 137.753397][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 138.027852][ T5285] loop3: detected capacity change from 0 to 512 [ 138.175106][ T5285] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 138.193002][ T5285] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.207419][ T4815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.237956][ T4815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.252409][ T4815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.463382][ T4815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.626445][ T4815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.801443][ T4815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.925617][ T4815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.952627][ T4815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.970853][ T4815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.051000][ T5296] loop0: detected capacity change from 0 to 128 [ 139.065371][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 139.075484][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 139.085423][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 139.097991][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 139.214594][ T4815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.266803][ T4815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.299125][ T4815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.317826][ T4815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.338401][ T4815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.355713][ T4815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.371234][ T4815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.412607][ T4815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.447848][ T26] audit: type=1804 audit(1738465010.832:32): pid=5296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.290" name="/newroot/83/file0/bus" dev="loop0" ino=1048614 res=1 errno=0 [ 139.456406][ T4815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.482309][ T4815] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.492113][ T4815] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.503226][ T4815] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.512254][ T4815] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.531231][ T4846] device veth0_vlan entered promiscuous mode [ 139.653950][ T26] audit: type=1800 audit(1738465010.892:33): pid=5296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.290" name="bus" dev="loop0" ino=1048614 res=0 errno=0 [ 139.738422][ T4846] device veth1_vlan entered promiscuous mode [ 139.943643][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 139.976881][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 140.031239][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 140.239406][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 140.256111][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 140.288944][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 140.328708][ T4846] device veth0_macvtap entered promiscuous mode [ 140.408056][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 140.431136][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 140.460890][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 140.474853][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 140.551036][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 140.605896][ T4846] device veth1_macvtap entered promiscuous mode [ 140.793541][ T5327] siw: device registration error -23 [ 141.468858][ T4846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.499850][ T4846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.536956][ T4846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.581268][ T4846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.599255][ T4846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.682399][ T4846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.700249][ T4846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.711741][ T4846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.729410][ T4846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.754956][ T4846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.771395][ T4846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.822853][ T4914] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 141.833473][ T4914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 141.876849][ T4846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.905070][ T4846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.919043][ T4846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.937564][ T4846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.950257][ T4846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.962830][ T4846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.974687][ T4846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.986866][ T4846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.003127][ T4846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.014188][ T4846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.027060][ T4846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.062411][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 142.095148][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 142.127617][ T5342] loop0: detected capacity change from 0 to 512 [ 142.156882][ T4846] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.168367][ T4846] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.191832][ T4846] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.200737][ T4846] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.254707][ T1425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.276106][ T1425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.294405][ T5352] loop3: detected capacity change from 0 to 128 [ 142.313094][ T5342] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 142.331613][ T5342] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.491905][ T4914] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 142.841707][ T4312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.930208][ T4312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.281571][ T5352] handle_bad_sector: 49 callbacks suppressed [ 143.281592][ T5352] attempt to access beyond end of device [ 143.281592][ T5352] loop3: rw=2049, want=1033, limit=128 [ 143.343648][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 143.524890][ T26] audit: type=1804 audit(1738465014.912:34): pid=5356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.304" name="/newroot/81/file0/bus" dev="loop3" ino=1048616 res=1 errno=0 [ 143.561502][ T26] audit: type=1800 audit(1738465014.942:35): pid=5356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.304" name="bus" dev="loop3" ino=1048616 res=0 errno=0 [ 144.600419][ T9] attempt to access beyond end of device [ 144.600419][ T9] loop3: rw=1, want=553, limit=128 [ 144.633002][ T9] attempt to access beyond end of device [ 144.633002][ T9] loop3: rw=1, want=1025, limit=128 [ 144.662983][ T9] attempt to access beyond end of device [ 144.662983][ T9] loop3: rw=1, want=537, limit=128 [ 144.713175][ T9] attempt to access beyond end of device [ 144.713175][ T9] loop3: rw=1, want=825, limit=128 [ 144.742837][ T9] attempt to access beyond end of device [ 144.742837][ T9] loop3: rw=1, want=1041, limit=128 [ 145.301761][ T5403] siw: device registration error -23 [ 145.962103][ T5399] loop1: detected capacity change from 0 to 512 [ 146.030837][ T1425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.046558][ T1425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.097974][ T5399] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 146.132785][ T5399] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.172636][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 146.403091][ T4313] device hsr_slave_0 left promiscuous mode [ 146.430012][ T4313] device hsr_slave_1 left promiscuous mode [ 146.451400][ T4313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.479328][ T5412] loop0: detected capacity change from 0 to 128 [ 146.513156][ T4313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.552306][ T4313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.582744][ T4313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.823432][ T4313] device bridge_slave_1 left promiscuous mode [ 146.831727][ T4313] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.417228][ T4313] device bridge_slave_0 left promiscuous mode [ 147.490942][ T4313] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.765149][ T4313] device hsr_slave_0 left promiscuous mode [ 147.902393][ T4313] device hsr_slave_1 left promiscuous mode [ 148.015411][ T4313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.148096][ T4313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.258288][ T5412] attempt to access beyond end of device [ 148.258288][ T5412] loop0: rw=2049, want=833, limit=128 [ 148.304190][ T4313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.324919][ T4313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.337270][ T26] audit: type=1804 audit(1738465019.722:36): pid=5421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.317" name="/newroot/91/file0/bus" dev="loop0" ino=1048620 res=1 errno=0 [ 148.408520][ T4313] device bridge_slave_1 left promiscuous mode [ 148.408750][ T26] audit: type=1800 audit(1738465019.792:37): pid=5421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.317" name="bus" dev="loop0" ino=1048620 res=0 errno=0 [ 148.452073][ T4313] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.466873][ T4313] device bridge_slave_0 left promiscuous mode [ 148.467124][ T5125] attempt to access beyond end of device [ 148.467124][ T5125] loop0: rw=1, want=681, limit=128 [ 148.484679][ T4313] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.505538][ T5125] attempt to access beyond end of device [ 148.505538][ T5125] loop0: rw=1, want=697, limit=128 [ 148.529358][ T5125] attempt to access beyond end of device [ 148.529358][ T5125] loop0: rw=1, want=721, limit=128 [ 148.557382][ T4313] device veth1_macvtap left promiscuous mode [ 148.564608][ T4313] device veth0_macvtap left promiscuous mode [ 148.570749][ T4313] device veth1_vlan left promiscuous mode [ 148.577256][ T4313] device veth0_vlan left promiscuous mode [ 148.586018][ T5125] attempt to access beyond end of device [ 148.586018][ T5125] loop0: rw=1, want=753, limit=128 [ 148.611503][ T5125] attempt to access beyond end of device [ 148.611503][ T5125] loop0: rw=1, want=769, limit=128 [ 148.623313][ T4313] device veth1_macvtap left promiscuous mode [ 148.634415][ T4313] device veth0_macvtap left promiscuous mode [ 148.640207][ T5125] attempt to access beyond end of device [ 148.640207][ T5125] loop0: rw=1, want=785, limit=128 [ 148.653322][ T4313] device veth1_vlan left promiscuous mode [ 148.657705][ T5125] attempt to access beyond end of device [ 148.657705][ T5125] loop0: rw=1, want=825, limit=128 [ 148.672354][ T4313] device veth0_vlan left promiscuous mode [ 148.680713][ T5125] attempt to access beyond end of device [ 148.680713][ T5125] loop0: rw=1, want=673, limit=128 [ 148.711589][ T5125] attempt to access beyond end of device [ 148.711589][ T5125] loop0: rw=1, want=689, limit=128 [ 148.742634][ T5125] attempt to access beyond end of device [ 148.742634][ T5125] loop0: rw=1, want=705, limit=128 [ 148.896830][ T5445] loop0: detected capacity change from 0 to 128 [ 149.012288][ T5445] EXT4-fs (loop0): Test dummy encryption mode enabled [ 149.044400][ T5445] EXT4-fs (loop0): Unrecognized mount option "smackfsroot=kfree" or missing value [ 149.125457][ T5447] siw: device registration error -23 [ 150.028392][ T4313] team0 (unregistering): Port device team_slave_1 removed [ 150.047881][ T4313] team0 (unregistering): Port device team_slave_0 removed [ 150.069820][ T4313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.097422][ T4313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.172983][ T4313] bond0 (unregistering): Released all slaves [ 150.335549][ T4313] team0 (unregistering): Port device team_slave_1 removed [ 150.352716][ T4313] team0 (unregistering): Port device team_slave_0 removed [ 150.366937][ T4313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.384336][ T4313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.464472][ T4313] bond0 (unregistering): Released all slaves [ 150.582776][ T4232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.607944][ T4232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.741073][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 151.195331][ T5465] loop0: detected capacity change from 0 to 512 [ 151.668183][ T5465] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 152.012216][ T5465] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.181089][ T5491] loop6: detected capacity change from 0 to 128 [ 152.416788][ T5506] loop3: detected capacity change from 0 to 128 [ 152.513628][ T26] audit: type=1804 audit(1738465023.902:38): pid=5509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.336" name="/newroot/1/file0/bus" dev="loop6" ino=1048624 res=1 errno=0 [ 152.562286][ T5506] EXT4-fs (loop3): Test dummy encryption mode enabled [ 152.592630][ T5506] EXT4-fs (loop3): Unrecognized mount option "smackfsroot=kfree" or missing value [ 152.889219][ T5496] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.041156][ T26] audit: type=1800 audit(1738465024.062:39): pid=5509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.336" name="bus" dev="loop6" ino=1048624 res=0 errno=0 [ 153.440472][ T5508] team0: Port device team_slave_1 removed [ 153.758431][ T5496] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.787235][ T5517] loop6: detected capacity change from 0 to 2048 [ 153.871055][ T5524] siw: device registration error -23 [ 154.116389][ T5524] device wireguard0 entered promiscuous mode [ 154.338513][ T5517] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 154.668732][ T5496] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.806057][ T5496] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.334682][ T5496] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.370798][ T5496] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.053940][ T5496] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.215211][ T5496] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.297381][ T5546] loop5: detected capacity change from 0 to 512 [ 156.324318][ T5552] loop3: detected capacity change from 0 to 128 [ 156.743054][ T26] audit: type=1804 audit(1738465028.082:40): pid=5566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.352" name="/newroot/95/file0/bus" dev="loop3" ino=1048626 res=1 errno=0 [ 156.861350][ T5546] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 157.072076][ T5546] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.353088][ T26] audit: type=1800 audit(1738465028.082:41): pid=5566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.352" name="bus" dev="loop3" ino=1048626 res=0 errno=0 [ 157.378889][ T5570] loop6: detected capacity change from 0 to 128 [ 157.477268][ T5570] EXT4-fs (loop6): Test dummy encryption mode enabled [ 157.496188][ T5570] EXT4-fs (loop6): Unrecognized mount option "smackfsroot=kfree" or missing value [ 158.128050][ T5588] device wireguard0 entered promiscuous mode [ 160.149765][ T5617] loop3: detected capacity change from 0 to 2048 [ 160.209896][ T5623] loop0: detected capacity change from 0 to 128 [ 160.391093][ T5617] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 160.416440][ T5633] loop5: detected capacity change from 0 to 128 [ 160.505404][ T5633] EXT4-fs (loop5): Test dummy encryption mode enabled [ 160.517957][ T26] audit: type=1800 audit(1738465031.902:42): pid=5617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.368" name="bus" dev="loop3" ino=19 res=0 errno=0 [ 160.558318][ T5637] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 160.559960][ T5633] EXT4-fs (loop5): Unrecognized mount option "smackfsroot=kfree" or missing value [ 160.587611][ T5628] loop1: detected capacity change from 0 to 512 [ 160.641164][ T26] audit: type=1804 audit(1738465031.992:43): pid=5634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.370" name="/newroot/101/file0/bus" dev="loop0" ino=1048628 res=1 errno=0 [ 160.702554][ T26] audit: type=1800 audit(1738465031.992:44): pid=5634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.370" name="bus" dev="loop0" ino=1048628 res=0 errno=0 [ 160.741735][ T5628] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 160.782950][ T5628] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.430211][ T4590] kernel write not supported for file /288/attr/exec (pid: 4590 comm: kworker/0:14) [ 162.359298][ T26] audit: type=1326 audit(1738465033.742:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5671 comm="syz.1.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb26cb1da9 code=0x7ffc0000 [ 162.426785][ T5672] mmap: syz.1.380 (5672) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 162.512628][ T26] audit: type=1326 audit(1738465033.772:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5671 comm="syz.1.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb26cb1da9 code=0x7ffc0000 [ 162.735818][ T26] audit: type=1326 audit(1738465033.772:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5671 comm="syz.1.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7feb26cb1da9 code=0x7ffc0000 [ 162.759798][ T26] audit: type=1326 audit(1738465033.782:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5671 comm="syz.1.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb26cb1da9 code=0x7ffc0000 [ 162.832927][ T26] audit: type=1326 audit(1738465033.782:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5671 comm="syz.1.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb26cb1da9 code=0x7ffc0000 [ 162.895188][ T5687] loop3: detected capacity change from 0 to 512 [ 162.972504][ T26] audit: type=1326 audit(1738465033.812:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5671 comm="syz.1.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7feb26cb1da9 code=0x7ffc0000 [ 163.074983][ T5687] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 163.092753][ T5687] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 163.272331][ T26] audit: type=1326 audit(1738465033.852:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5678 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f849a1c1da9 code=0x7ffc0000 [ 163.314537][ T5691] loop5: detected capacity change from 0 to 512 [ 163.581358][ T5691] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 163.648906][ T5691] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.650182][ T5706] crypto_alloc_aead failed rc=-2 [ 164.173419][ T5737] loop0: detected capacity change from 0 to 1024 [ 165.139818][ T5737] EXT4-fs (loop0): Ignoring removed orlov option [ 165.215412][ T5746] netlink: 4 bytes leftover after parsing attributes in process `syz.3.397'. [ 165.282241][ T5753] loop1: detected capacity change from 0 to 2048 [ 165.341717][ T5737] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000006,commit=0x0000000000000005,orlov,barrier=0x0000000000000003,max_batch_time=0x0000000000000000,bsdgroups,,errors=continue. Quota mode: writeback. [ 165.509285][ T5753] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000002,,errors=continue. Quota mode: none. [ 165.744680][ T5761] IPv4: Oversized IP packet from 127.202.26.0 [ 165.918341][ T5770] loop1: detected capacity change from 0 to 512 [ 165.993842][ T5770] EXT4-fs (loop1): Ignoring removed nobh option [ 166.026223][ T5774] loop6: detected capacity change from 0 to 2048 [ 166.074338][ T5770] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 166.112262][ T5770] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61 [ 166.125777][ T4160] loop6: p1 < > p2 p3 < > p4 < p5 > [ 166.131354][ T4160] loop6: partition table partially beyond EOD, truncated [ 166.153877][ T5770] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #13: comm syz.1.404: casefold flag without casefold feature [ 166.179056][ T5770] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.404: couldn't read orphan inode 13 (err -117) [ 166.187801][ T4160] loop6: p1 start 3405774849 is beyond EOD, truncated [ 166.192298][ T5770] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback. [ 166.226455][ T5770] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 166.271668][ T4160] loop6: p3 start 286593 is beyond EOD, truncated [ 166.293246][ T5789] device team_slave_0 entered promiscuous mode [ 166.299874][ T5789] device team_slave_1 entered promiscuous mode [ 166.349317][ T5795] loop5: detected capacity change from 0 to 128 [ 166.358324][ T5789] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 166.387509][ T5774] loop6: p1 < > p2 p3 < > p4 < p5 > [ 166.404378][ T5774] loop6: partition table partially beyond EOD, truncated [ 166.414029][ T5774] loop6: p1 start 3405774849 is beyond EOD, truncated [ 166.426889][ T5774] loop6: p3 start 286593 is beyond EOD, truncated [ 166.556337][ T5789] device team_slave_0 left promiscuous mode [ 166.562465][ T5789] device team_slave_1 left promiscuous mode [ 166.592886][ T5795] EXT4-fs (loop5): Test dummy encryption mode enabled [ 166.636583][ T5795] EXT4-fs (loop5): Unrecognized mount option "smackfsroot=kfree" or missing value [ 166.882016][ T4158] udevd[4158]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 166.897783][ T4294] udevd[4294]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 167.243197][ T4295] udevd[4295]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 167.666105][ T4158] udevd[4158]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 167.687336][ T4295] udevd[4295]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 167.766315][ T4160] udevd[4160]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 167.838629][ T26] kauditd_printk_skb: 131 callbacks suppressed [ 167.838647][ T26] audit: type=1326 audit(1738465039.222:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5808 comm="syz.0.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dfb51dda9 code=0x7ffc0000 [ 167.990565][ T26] audit: type=1326 audit(1738465039.222:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5808 comm="syz.0.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dfb51dda9 code=0x7ffc0000 [ 168.077545][ T26] audit: type=1326 audit(1738465039.262:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5808 comm="syz.0.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9dfb51dda9 code=0x7ffc0000 [ 168.172679][ T26] audit: type=1326 audit(1738465039.262:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5808 comm="syz.0.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dfb51dda9 code=0x7ffc0000 [ 168.239039][ T5834] netlink: 'syz.5.425': attribute type 4 has an invalid length. [ 168.274801][ T26] audit: type=1326 audit(1738465039.262:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5808 comm="syz.0.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dfb51dda9 code=0x7ffc0000 [ 168.307316][ T5821] crypto_alloc_aead failed rc=-4 [ 168.389155][ T26] audit: type=1326 audit(1738465039.262:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5808 comm="syz.0.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9dfb51dda9 code=0x7ffc0000 [ 168.470540][ T5851] sctp: [Deprecated]: syz.5.428 (pid 5851) Use of int in max_burst socket option. [ 168.470540][ T5851] Use struct sctp_assoc_value instead [ 168.503056][ T26] audit: type=1326 audit(1738465039.262:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5808 comm="syz.0.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dfb51dda9 code=0x7ffc0000 [ 168.566692][ T26] audit: type=1326 audit(1738465039.262:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5808 comm="syz.0.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dfb51dda9 code=0x7ffc0000 [ 168.621461][ T26] audit: type=1326 audit(1738465039.262:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5808 comm="syz.0.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9dfb51dda9 code=0x7ffc0000 [ 168.788611][ T26] audit: type=1326 audit(1738465039.262:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5808 comm="syz.0.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dfb51dda9 code=0x7ffc0000 [ 168.923399][ T5867] siw: device registration error -23 [ 169.234305][ T5867] device wireguard0 entered promiscuous mode [ 169.633298][ T5874] loop1: detected capacity change from 0 to 128 [ 169.716706][ T5874] EXT4-fs (loop1): Test dummy encryption mode enabled [ 169.732245][ T5874] EXT4-fs (loop1): Unrecognized mount option "smackfsroot=kfree" or missing value [ 169.928424][ T5883] device pim6reg1 entered promiscuous mode [ 170.263978][ T5904] binfmt_misc: register: failed to install interpreter file ./file0 [ 171.490254][ T5932] loop0: detected capacity change from 0 to 128 [ 171.623625][ T5932] EXT4-fs (loop0): Test dummy encryption mode enabled [ 171.630960][ T5932] EXT4-fs (loop0): Unrecognized mount option "smackfsroot=kfree" or missing value [ 171.819403][ T5945] loop3: detected capacity change from 0 to 512 [ 171.965889][ T5945] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 172.025189][ T5945] ext4 filesystem being mounted at /119/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 172.112286][ T5955] device bond_slave_1 entered promiscuous mode [ 172.143736][ T5955] device bond_slave_1 left promiscuous mode [ 172.181896][ T5962] loop6: detected capacity change from 0 to 512 [ 172.498586][ T5962] EXT4-fs (loop6): mounted filesystem without journal. Opts: barrier=0x0000000000000007,i_version,,errors=continue. Quota mode: writeback. [ 173.836949][ T5962] ext4 filesystem being mounted at /18/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.865553][ T26] kauditd_printk_skb: 71 callbacks suppressed [ 173.865684][ T26] audit: type=1326 audit(1738465044.042:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5965 comm="syz.1.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feb26ca8d67 code=0x7ffc0000 [ 174.229201][ T26] audit: type=1326 audit(1738465044.042:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5965 comm="syz.1.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feb26c4dfa9 code=0x7ffc0000 [ 174.263447][ T26] audit: type=1326 audit(1738465044.042:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5965 comm="syz.1.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7feb26cb1da9 code=0x7ffc0000 [ 174.367739][ T26] audit: type=1326 audit(1738465044.172:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5965 comm="syz.1.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feb26ca8d67 code=0x7ffc0000 [ 174.731604][ T5994] device wireguard0 entered promiscuous mode [ 175.055713][ T26] audit: type=1326 audit(1738465044.172:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5965 comm="syz.1.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feb26c4dfa9 code=0x7ffc0000 [ 175.099478][ T5993] loop5: detected capacity change from 0 to 2048 [ 175.106981][ T26] audit: type=1326 audit(1738465044.172:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5965 comm="syz.1.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7feb26cb1da9 code=0x7ffc0000 [ 175.133855][ T5999] netlink: 248 bytes leftover after parsing attributes in process `syz.3.474'. [ 175.184372][ T26] audit: type=1326 audit(1738465044.312:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5965 comm="syz.1.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feb26ca8d67 code=0x7ffc0000 [ 175.209005][ T26] audit: type=1326 audit(1738465044.312:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5965 comm="syz.1.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feb26c4dfa9 code=0x7ffc0000 [ 175.307363][ T26] audit: type=1326 audit(1738465044.312:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5965 comm="syz.1.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7feb26cb1da9 code=0x7ffc0000 [ 175.326601][ T6003] loop6: detected capacity change from 0 to 128 [ 175.367545][ T6003] EXT4-fs (loop6): Test dummy encryption mode enabled [ 175.383122][ T5993] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 175.418785][ T5993] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 175.436120][ T6003] EXT4-fs (loop6): Unrecognized mount option "smackfsroot=kfree" or missing value [ 176.031922][ T6041] loop0: detected capacity change from 0 to 128 [ 176.180455][ T6031] loop3: detected capacity change from 0 to 8192 [ 176.282739][ T6031] handle_bad_sector: 21 callbacks suppressed [ 176.282760][ T6031] attempt to access beyond end of device [ 176.282760][ T6031] loop3: rw=0, want=57848, limit=8192 [ 176.358913][ T6050] lo speed is unknown, defaulting to 1000 [ 176.416868][ T6031] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 176.466402][ T6031] FAT-fs (loop3): Filesystem has been set read-only [ 176.528220][ T6031] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 176.988394][ T6031] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 177.262834][ T6059] device wireguard0 entered promiscuous mode [ 177.856414][ T6079] loop6: detected capacity change from 0 to 128 [ 177.969331][ T6079] EXT4-fs (loop6): Test dummy encryption mode enabled [ 177.980584][ T6079] EXT4-fs (loop6): Unrecognized mount option "smackfsroot=kfree" or missing value [ 178.188403][ T6092] [ 178.190909][ T6092] ============================= [ 178.232893][ T6092] WARNING: suspicious RCU usage [ 178.232907][ T6092] 5.15.178-syzkaller #0 Not tainted [ 178.232920][ T6092] ----------------------------- [ 178.232928][ T6092] include/linux/rhashtable.h:594 suspicious rcu_dereference_check() usage! [ 178.232944][ T6092] [ 178.232944][ T6092] other info that might help us debug this: [ 178.232944][ T6092] [ 178.232952][ T6092] [ 178.232952][ T6092] rcu_scheduler_active = 2, debug_locks = 1 [ 178.232966][ T6092] 1 lock held by syz.0.496/6092: [ 178.232979][ T6092] #0: ffffffff8dc42788 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x15e/0x1540 [ 178.233074][ T6092] [ 178.233074][ T6092] stack backtrace: [ 178.233085][ T6092] CPU: 0 PID: 6092 Comm: syz.0.496 Not tainted 5.15.178-syzkaller #0 [ 178.233106][ T6092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 178.233124][ T6092] Call Trace: [ 178.233132][ T6092] [ 178.233141][ T6092] dump_stack_lvl+0x1e3/0x2d0 [ 178.233169][ T6092] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 178.233203][ T6092] ? lockdep_rcu_suspicious+0x158/0x1c0 [ 178.233230][ T6092] rhltable_lookup+0x7e5/0x7f0 [ 178.233253][ T6092] ? mark_lock+0x98/0x340 [ 178.233278][ T6092] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 178.233302][ T6092] ? local_bh_enable+0x20/0x20 [ 178.233323][ T6092] ? mr_mfc_find_parent+0x190/0x190 [ 178.233349][ T6092] ? local_bh_enable+0x20/0x20 [ 178.233378][ T6092] ? print_irqtrace_events+0x210/0x210 [ 178.233399][ T6092] ? lockdep_hardirqs_on_prepare+0x7a0/0x7a0 [ 178.233424][ T6092] mr_mfc_find_any_parent+0xb4/0x1e0 [ 178.233448][ T6092] ? local_bh_enable+0x20/0x20 [ 178.233472][ T6092] ip_mr_forward+0x213/0x1010 [ 178.233500][ T6092] ? ipmr_mfc_add+0x1e9b/0x2df0 [ 178.233524][ T6092] ipmr_mfc_add+0x243a/0x2df0 [ 178.233559][ T6092] ? ipmr_mfc_delete+0x660/0x660 [ 178.233579][ T6092] ? futex_wait+0x634/0x740 [ 178.233626][ T6092] ip_mroute_setsockopt+0xfa9/0x1540 [ 178.233661][ T6092] ? ipmr_rule_default+0x70/0x70 [ 178.233705][ T6092] ip_setsockopt+0x5b3/0x3fb0 [ 178.233736][ T6092] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 178.233766][ T6092] ? aa_af_perm+0x350/0x350 [ 178.233789][ T6092] ? __fget_files+0x413/0x480 [ 178.233818][ T6092] ? aa_sock_opt_perm+0x79/0x110 [ 178.233841][ T6092] ? sock_common_setsockopt+0x33/0xc0 [ 178.233872][ T6092] ? raw_setsockopt+0x100/0x180 [ 178.233894][ T6092] ? sock_common_recvmsg+0x240/0x240 [ 178.233918][ T6092] __sys_setsockopt+0x57e/0x990 [ 178.233947][ T6092] ? __ia32_sys_recv+0xb0/0xb0 [ 178.233980][ T6092] ? syscall_enter_from_user_mode+0x2e/0x240 [ 178.234009][ T6092] __x64_sys_setsockopt+0xb1/0xc0 [ 178.234042][ T6092] do_syscall_64+0x3b/0xb0 [ 178.234061][ T6092] ? clear_bhb_loop+0x15/0x70 [ 178.234103][ T6092] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 178.234130][ T6092] RIP: 0033:0x7f9dfb51dda9 [ 178.234150][ T6092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.234169][ T6092] RSP: 002b:00007f9df9387038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 178.234194][ T6092] RAX: ffffffffffffffda RBX: 00007f9dfb736fa0 RCX: 00007f9dfb51dda9 [ 178.234212][ T6092] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000006 [ 178.234225][ T6092] RBP: 00007f9dfb59f2a0 R08: 000000000000003c R09: 0000000000000000 [ 178.234240][ T6092] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000000 [ 178.234253][ T6092] R13: 0000000000000000 R14: 00007f9dfb736fa0 R15: 00007fff5abd6f88 [ 178.234283][ T6092] [ 178.234294][ T6092] [ 178.234300][ T6092] ============================= [ 178.234309][ T6092] WARNING: suspicious RCU usage [ 178.234317][ T6092] 5.15.178-syzkaller #0 Not tainted [ 178.234329][ T6092] ----------------------------- [ 178.234336][ T6092] include/linux/rhashtable.h:369 suspicious rcu_dereference_check() usage! [ 178.234352][ T6092] [ 178.234352][ T6092] other info that might help us debug this: [ 178.234352][ T6092] [ 178.234360][ T6092] [ 178.234360][ T6092] rcu_scheduler_active = 2, debug_locks = 1 [ 178.234374][ T6092] 1 lock held by syz.0.496/6092: [ 178.234387][ T6092] #0: ffffffff8dc42788 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x15e/0x1540 [ 178.234456][ T6092] [ 178.234456][ T6092] stack backtrace: [ 178.234463][ T6092] CPU: 0 PID: 6092 Comm: syz.0.496 Not tainted 5.15.178-syzkaller #0 [ 178.234484][ T6092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 178.234497][ T6092] Call Trace: [ 178.234504][ T6092] [ 178.234513][ T6092] dump_stack_lvl+0x1e3/0x2d0 [ 178.234539][ T6092] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 178.234573][ T6092] ? lockdep_rcu_suspicious+0x158/0x1c0 [ 178.234601][ T6092] rhltable_lookup+0x582/0x7f0 [ 178.234634][ T6092] ? local_bh_enable+0x20/0x20 [ 178.234656][ T6092] ? mr_mfc_find_parent+0x190/0x190 [ 178.234682][ T6092] ? local_bh_enable+0x20/0x20 [ 178.234711][ T6092] ? print_irqtrace_events+0x210/0x210 [ 178.234735][ T6092] ? lockdep_hardirqs_on_prepare+0x7a0/0x7a0 [ 178.234761][ T6092] mr_mfc_find_any_parent+0xb4/0x1e0 [ 178.234787][ T6092] ? local_bh_enable+0x20/0x20 [ 178.234812][ T6092] ip_mr_forward+0x213/0x1010 [ 178.234841][ T6092] ? ipmr_mfc_add+0x1e9b/0x2df0 [ 178.234883][ T6092] ipmr_mfc_add+0x243a/0x2df0 [ 178.234922][ T6092] ? ipmr_mfc_delete+0x660/0x660 [ 178.234941][ T6092] ? futex_wait+0x634/0x740 [ 178.234991][ T6092] ip_mroute_setsockopt+0xfa9/0x1540 [ 178.235027][ T6092] ? ipmr_rule_default+0x70/0x70 [ 178.235072][ T6092] ip_setsockopt+0x5b3/0x3fb0 [ 178.235104][ T6092] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 178.235135][ T6092] ? aa_af_perm+0x350/0x350 [ 178.235158][ T6092] ? __fget_files+0x413/0x480 [ 178.235188][ T6092] ? aa_sock_opt_perm+0x79/0x110 [ 178.235214][ T6092] ? sock_common_setsockopt+0x33/0xc0 [ 178.235236][ T6092] ? raw_setsockopt+0x100/0x180 [ 178.235258][ T6092] ? sock_common_recvmsg+0x240/0x240 [ 178.235282][ T6092] __sys_setsockopt+0x57e/0x990 [ 178.235312][ T6092] ? __ia32_sys_recv+0xb0/0xb0 [ 178.235347][ T6092] ? syscall_enter_from_user_mode+0x2e/0x240 [ 178.235376][ T6092] __x64_sys_setsockopt+0xb1/0xc0 [ 178.235403][ T6092] do_syscall_64+0x3b/0xb0 [ 178.235424][ T6092] ? clear_bhb_loop+0x15/0x70 [ 178.235446][ T6092] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 178.235473][ T6092] RIP: 0033:0x7f9dfb51dda9 [ 178.235492][ T6092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.235511][ T6092] RSP: 002b:00007f9df9387038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 178.235536][ T6092] RAX: ffffffffffffffda RBX: 00007f9dfb736fa0 RCX: 00007f9dfb51dda9 [ 178.235553][ T6092] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000006 [ 178.235567][ T6092] RBP: 00007f9dfb59f2a0 R08: 000000000000003c R09: 0000000000000000 [ 178.235583][ T6092] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000000 [ 178.235597][ T6092] R13: 0000000000000000 R14: 00007f9dfb736fa0 R15: 00007fff5abd6f88 [ 178.235626][ T6092] [ 178.235636][ T6092] [ 178.235643][ T6092] ============================= [ 178.235650][ T6092] WARNING: suspicious RCU usage [ 178.235658][ T6092] 5.15.178-syzkaller #0 Not tainted [ 178.235682][ T6092] ----------------------------- [ 178.235688][ T6092] include/linux/rhashtable.h:614 suspicious rcu_dereference_check() usage! [ 178.235703][ T6092] [ 178.235703][ T6092] other info that might help us debug this: [ 178.235703][ T6092] [ 178.235711][ T6092] [ 178.235711][ T6092] rcu_scheduler_active = 2, debug_locks = 1 [ 178.235725][ T6092] 1 lock held by syz.0.496/6092: [ 178.235737][ T6092] #0: ffffffff8dc42788 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x15e/0x1540 [ 178.235800][ T6092] [ 178.235800][ T6092] stack backtrace: [ 178.235807][ T6092] CPU: 0 PID: 6092 Comm: syz.0.496 Not tainted 5.15.178-syzkaller #0 [ 178.235827][ T6092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 178.235839][ T6092] Call Trace: [ 178.235847][ T6092] [ 178.235864][ T6092] dump_stack_lvl+0x1e3/0x2d0 [ 178.235889][ T6092] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 178.235921][ T6092] ? lockdep_rcu_suspicious+0x158/0x1c0 [ 178.235946][ T6092] rhltable_lookup+0x676/0x7f0 [ 178.235977][ T6092] ? local_bh_enable+0x20/0x20 [ 178.235997][ T6092] ? mr_mfc_find_parent+0x190/0x190 [ 178.236022][ T6092] ? local_bh_enable+0x20/0x20 [ 178.236049][ T6092] ? print_irqtrace_events+0x210/0x210 [ 178.236069][ T6092] ? lockdep_hardirqs_on_prepare+0x7a0/0x7a0 [ 178.236093][ T6092] mr_mfc_find_any_parent+0xb4/0x1e0 [ 178.236116][ T6092] ? local_bh_enable+0x20/0x20 [ 178.236139][ T6092] ip_mr_forward+0x213/0x1010 [ 178.236165][ T6092] ? ipmr_mfc_add+0x1e9b/0x2df0 [ 178.236190][ T6092] ipmr_mfc_add+0x243a/0x2df0 [ 178.236223][ T6092] ? ipmr_mfc_delete+0x660/0x660 [ 178.236240][ T6092] ? futex_wait+0x634/0x740 [ 178.236282][ T6092] ip_mroute_setsockopt+0xfa9/0x1540 [ 178.236314][ T6092] ? ipmr_rule_default+0x70/0x70 [ 178.236354][ T6092] ip_setsockopt+0x5b3/0x3fb0 [ 178.236383][ T6092] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 178.236411][ T6092] ? aa_af_perm+0x350/0x350 [ 178.236432][ T6092] ? __fget_files+0x413/0x480 [ 178.236460][ T6092] ? aa_sock_opt_perm+0x79/0x110 [ 178.236482][ T6092] ? sock_common_setsockopt+0x33/0xc0 [ 178.236504][ T6092] ? raw_setsockopt+0x100/0x180 [ 178.236526][ T6092] ? sock_common_recvmsg+0x240/0x240 [ 178.236550][ T6092] __sys_setsockopt+0x57e/0x990 [ 178.236578][ T6092] ? __ia32_sys_recv+0xb0/0xb0 [ 178.236609][ T6092] ? syscall_enter_from_user_mode+0x2e/0x240 [ 178.236637][ T6092] __x64_sys_setsockopt+0xb1/0xc0 [ 178.236661][ T6092] do_syscall_64+0x3b/0xb0 [ 178.236681][ T6092] ? clear_bhb_loop+0x15/0x70 [ 178.236702][ T6092] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 178.236727][ T6092] RIP: 0033:0x7f9dfb51dda9 [ 178.236745][ T6092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.236763][ T6092] RSP: 002b:00007f9df9387038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 178.236787][ T6092] RAX: ffffffffffffffda RBX: 00007f9dfb736fa0 RCX: 00007f9dfb51dda9 [ 178.236803][ T6092] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000006 [ 178.236817][ T6092] RBP: 00007f9dfb59f2a0 R08: 000000000000003c R09: 0000000000000000 [ 178.236831][ T6092] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000000 [ 178.236845][ T6092] R13: 0000000000000000 R14: 00007f9dfb736fa0 R15: 00007fff5abd6f88 [ 178.236885][ T6092] [ 178.444669][ T6103] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.549550][ T6103] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.653007][ T6103] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.795726][ T6103] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.799825][ T6103] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.821231][ T6103] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.860874][ T6103] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.886150][ T6103] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0