last executing test programs: 25.617521515s ago: executing program 3 (id=41): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000340)={[{@gid={'gid', 0x3d, 0xee01}}, {@uid}, {@unhide}, {@hide}, {@gid}, {@map_acorn}, {@cruft}, {@nojoliet}, {@nojoliet}, {@nojoliet}, {@overriderock}, {@iocharset={'iocharset', 0x3d, 'default'}}]}, 0x2, 0xa32, &(0x7f0000001040)="$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") 24.94490399s ago: executing program 3 (id=46): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRESHEX, @ANYRES64=0x0, @ANYRESDEC=r0, @ANYBLOB="9363b2817c752b0ae1c3698c36db025807d4d9339686d9df0e08213751cc5aa1c5b891c63d52475cfd484333899fda90e079f6c4669fdce814ddb4f297596fd22b8e660a5efb06a383b61c6dc10709f821d0fe7bb6443d1919853285cb4a9d39e34099982b29ae8e021f9be95365b091107fca7dd2d4290c5eb8e54d725ce3e678ada4cab77cd86923cb45bfed52081f6fd3318c9f3052a65b998c84107861864188213cd81f8e1fb0"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000000), &(0x7f0000000500)=""/121}, 0xfffffffffffffe93) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5}, 0x18) syz_emit_ethernet(0x12, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb01267100000e000442"], 0x0) ioctl$sock_bt_hci(r2, 0x400448ca, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x448000) umount2(&(0x7f0000000000)='./file0\x00', 0x3) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000440), 0x10) listen(r7, 0x0) accept4$unix(r7, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300)=""/207, 0xcf) 14.057845194s ago: executing program 3 (id=130): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014400000000c0a01011d000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r1) 13.837201376s ago: executing program 3 (id=132): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) 13.577032612s ago: executing program 3 (id=136): kexec_load(0x3e00, 0x0, 0x0, 0x3e0000) 13.375195291s ago: executing program 3 (id=137): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="f34943a24c9aa67b1f8686db60d38b40f9cc250906eaa69a788098bd7a55e34b40ef6ba2a5ee107833295110e171ebc82c724b93a52ca6d2fab94ba6b9530aadb5be6909c37a3757d6f239ec300c04ca309f85eaf35b337f91967d9833f4887827617c7e436c62a261ca5f5d9dbc935730622e5364e7550befc274702d48ca94", @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x90}) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xb856b80c0ae21cad}, 0xc, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0004012769580000000000000080000900030073797a3100000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000844) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, 0x0, 0x0}, 0x20) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="01002abd7000fedbdf252100000008000300", @ANYRES32, @ANYBLOB="1c002d8005000100fe00f2ff070002"], 0x38}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000) syz_genetlink_get_family_id$nfc(&(0x7f0000000540), 0xffffffffffffffff) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') ioctl$SIOCGETLINKNAME(r2, 0x89e0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000240), 0x8080, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}}) 4.687559398s ago: executing program 4 (id=191): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048084}, 0x4006) 4.416391625s ago: executing program 1 (id=192): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x49, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 4.232937133s ago: executing program 0 (id=193): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040), 0xfe, 0x4f2, &(0x7f0000000b00)="$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") 4.177053109s ago: executing program 4 (id=195): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000007000000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r2 = syz_mount_image$iso9660(&(0x7f0000000d40), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000b80)=ANY=[], 0x1, 0x5d2, &(0x7f00000005c0)="$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") ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)) chdir(&(0x7f0000000000)='./file0\x00') r3 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x24, r6, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}}, 0x18) sendto(r5, &(0x7f0000000bc0)="cc767f05fd7b2b56669e26621d3e17d2c7064cdbc0bebe6ae1c4e4c90f69bba201eeef30f473889c815024afe5da98894771ccce7b2044c35c6e0515d3876c9660f8bb81bc8936932d2e0fdb0d8d09d5a20527ed64bc6e78564663cc0958cc86dcc080aa76b1c295513af7d0536ea2496cc3b85443ace25f256fdba8322c07aca8586db6fd014975df3bc2e83403abb33be99a9893f68c46d78fd0ca01d6e0e14dc0ba43ed84dc383e773dd6133c5d2f6d5eebbe05a0b2af6bb7", 0xba, 0x810, &(0x7f00000002c0)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0xf192000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x3ff}}, 0x80) sendmsg$key(r3, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="9828267f7424b67ba906a1e7f14558c44720723045450830df9ec0ccacb7e85a570967171700be14a4449b6a6629439c92ff585412b23e92494769d7ee26332d47dc868d18f0229dc0ec207546b5fdd028c244", @ANYRESHEX=r0, @ANYRESHEX=r4, @ANYRESOCT=r2, @ANYRES32=r1], 0xffffffb4}, 0x1, 0x7}, 0x4) 4.076100779s ago: executing program 2 (id=196): close(0x3) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, 0x0, 0x0) 4.075565458s ago: executing program 2 (id=197): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@map=r0, 0x24, 0x0, 0x0, &(0x7f0000000040)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 4.032672493s ago: executing program 2 (id=198): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0xfdfe, 0x7, @remote, 0x4}, 0x1c) connect$pppl2tp(r3, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 3.907523415s ago: executing program 1 (id=199): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r2, 0x1, 0x0, 0x25cfdbfc, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) 3.805046685s ago: executing program 4 (id=200): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ptrace$ARCH_GET_CPUID(0x1e, 0x0, 0x0, 0x1011) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40c00, 0x0) syz_open_pts(r3, 0x0) fchdir(r1) close_range(r1, 0xffffffffffffffff, 0x0) 3.750529251s ago: executing program 2 (id=201): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000100)={[{@bsdgroups}, {@nobarrier}, {@noinit_itable}]}, 0xfc, 0x574, &(0x7f0000001980)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r2, r2, 0x0, 0xe3aa6ea) 3.619241134s ago: executing program 1 (id=202): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) io_cancel(0x0, 0x0, 0x0) io_destroy(0x0) 3.500662195s ago: executing program 0 (id=203): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file0\x00', 0x810082, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x2b9, &(0x7f0000000280)="$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") close_range(r0, 0xffffffffffffffff, 0x0) 3.500269085s ago: executing program 1 (id=204): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) io_cancel(0x0, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, 0x0, 0x0) write$nci(r0, 0x0, 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r5}, &(0x7f00000004c0), &(0x7f0000000500)=r6}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) faccessat2(r4, 0x0, 0x100, 0x300) 3.331011792s ago: executing program 2 (id=205): r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000004580)=[{{&(0x7f0000000a00)={0xa, 0x4e20, 0x7992, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000290000003200000000000000000000000000ffffac141430d3"], 0x20}}], 0x1, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x5, 0xc}, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000000400000005"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r3, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'erspan0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x7, 0x7800, 0x6, 0x9, {{0xe, 0x4, 0x0, 0x3, 0x38, 0x65, 0x0, 0x7, 0x4, 0x0, @local, @remote, {[@generic={0x7, 0x5, "f02951"}, @timestamp_prespec={0x44, 0x14, 0xe1, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5f7bfd8b}, {@remote, 0xdc6}]}, @generic={0x94, 0x9, "2d0d3344306497"}]}}}}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e00000004000000810000000200000020200400", @ANYRES32=r4, @ANYBLOB='\a\x00'/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB="1eade8e902000000020000000f000000000000ebb22bb6678dedbc"], 0x50) r7 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000100)) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_DRAIN(r8, 0x4144, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000060000000000000000000000850000004100000018110000", @ANYRES32=r6, @ANYBLOB="f9ffffff00000000b70200000000000085000000860000009500000000000000d6198a49f9a3"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000002640)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0xa0280, 0x0) r10 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x161902) writev(r10, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x83, 0x7fff8000}]}) close_range(r11, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40081, 0x0) 2.383082195s ago: executing program 1 (id=206): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x207}, 0x38) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket(0x8000000010, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r3}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r4}, 0x10) write(r2, &(0x7f00000002c0)="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", 0xfc) 2.278744686s ago: executing program 0 (id=207): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01", @ANYBLOB="9907b858f4ff770eccb7cfa818e79581626019827b3e31e45d44bb321e8b3d4529d837a737d62c3c3507106c2e62e7143e3aa1d41d78a967920431e3ca880700639969d9ab70dc24188601ba4c127ad07867d7d50ec425e2ffe6e8ade2d79c3808ede74fb6258f8cff54dc754d061277b948bce66b2d30cf4392207a96d4", @ANYRESOCT=0x0, @ANYRESDEC], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r7}, 0x18) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB='ya \x00\x00\x00\x00\a\x00\x00~\x00'], 0x1c}}, 0x0) 1.772920646s ago: executing program 4 (id=208): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ptrace$ARCH_GET_CPUID(0x1e, 0x0, 0x0, 0x1011) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r3}, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40c00, 0x0) syz_open_pts(r4, 0x0) fchdir(r1) 857.263836ms ago: executing program 0 (id=209): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0800000004000000040000000700000000000000", @ANYRES32, @ANYBLOB="00000000000002000000fb310000000000000000", @ANYRES32=0x0, @ANYRES32], 0x48) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r3, &(0x7f00000000c0)}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x10}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYRES16=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000000)='kfree\x00', r8, 0x0, 0x3}, 0x18) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r9, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, r10, 0x0, 0x3, 0x4000}}, 0x20) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc084}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a3000000000540003"], 0xa8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) setitimer(0x0, &(0x7f0000000440)={{}, {0x77359400}}, 0x0) r11 = signalfd(0xffffffffffffffff, &(0x7f00000003c0)={[0xfffffffffffffffd]}, 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r11) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x5c, 0x10, 0x19, 0x70bd2c, 0x255fdbfa, {0x0, 0x0, 0x0, 0x0, 0x40d87, 0x79269}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x5}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x7}]}}}, @IFLA_IFNAME={0x14, 0x3, 'ip6gretap0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0xcc93f1266b77d0bf}, 0x8040) r13 = gettid() fcntl$setown(r11, 0x8, r13) fcntl$setsig(0xffffffffffffffff, 0xa, 0xe) socket$inet(0x2, 0x4000000000000001, 0x0) 794.454092ms ago: executing program 1 (id=210): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000500)=""/18, 0x12, 0x3, 0x3, 0x0, 0x0, 0xc04}}, 0x120) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) 732.798318ms ago: executing program 4 (id=211): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) mount$9p_unix(&(0x7f0000003680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000003640), 0x2000000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) socket(0xa, 0x2, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x3, 0xfd, 0x3, 0x200}}) 731.295968ms ago: executing program 2 (id=212): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c2ca50e1bb48e49b37a1f46700e6f755761a4a1c87bed5a9eb7069220e48bf4977dc21fef933f776cc08781c55f73cfa7a9bad83c80cc297166ea03290ff371280897a69582a1f0d8736cb3075f79550966c08ab589bb6b8c90f09f9f6314c218fe7"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000f400850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000580)={0x4, &(0x7f00000005c0)=[{0x2b, 0x1, 0x4, 0x2}, {0x5, 0x2, 0x75, 0x8}, {0x6, 0x6, 0xa4, 0x8}, {0x0, 0x10, 0xfb, 0x7ff}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) getcwd(&(0x7f0000000140)=""/237, 0xed) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) set_mempolicy(0x4005, &(0x7f0000000040)=0x10000000005, 0x4) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r5, 0x0, 0x20000000002}, 0x18) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r9, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='@\x00', 0xffd7, 0x0) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000008ff2bd18110000000000000000000004000000000000000a33e871e94642877f2e43dfa484cec671d9623c9118850382f98013ae8f3fa7077ba53db4075f7af4db2a9e4cb592a81d66a59fb2185950b051b2a72a8b69bf2d642f21fa53aaa5934d2eac643c21d89c47b464e37700aae114cb409d0903b0ccb84e87f9cb432f0694611e78afb180dd7e85d4573a1a91de9f001e3e1703b51bdf3b8e37d842cfc50962127ddac6a617127ea2c006b2166dd48ffaef58e3a5e49d0be2b346e64c0f8df9b824b4078ef95d66313a55", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) pwrite64(r0, &(0x7f00000003c0)="72e1bb88f0ddad21c12b7199e3a0e1331aa2c6cfb81183c16464efa8", 0x1c, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(r2, r10, 0x0) 452.689506ms ago: executing program 4 (id=213): getresuid(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000300)=0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sched_switch\x00', r2, 0x0, 0x2}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000140), 0x2, 0xbca, &(0x7f0000000600)="$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") r5 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x69000}], 0x1, 0x7000, 0x0, 0x3) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) close(0x3) 451.952616ms ago: executing program 0 (id=214): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x24}}]}, &(0x7f0000000140)=0x10) 0s ago: executing program 0 (id=215): socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x14, 0x4c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) unshare(0x4000400) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.159' (ED25519) to the list of known hosts. [ 64.983015][ T4172] cgroup: Unknown subsys name 'net' [ 65.102453][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.710666][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 68.145411][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 68.243398][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.250830][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.259645][ T4184] device bridge_slave_0 entered promiscuous mode [ 68.282262][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.289565][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.298905][ T4184] device bridge_slave_1 entered promiscuous mode [ 68.348655][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.379062][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.437555][ T4184] team0: Port device team_slave_0 added [ 68.462756][ T4184] team0: Port device team_slave_1 added [ 68.520734][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 68.531140][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.538408][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.565270][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.580982][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.588134][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.614586][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.677744][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 68.764804][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 68.775321][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 68.802303][ T4184] device hsr_slave_0 entered promiscuous mode [ 68.809812][ T4184] device hsr_slave_1 entered promiscuous mode [ 68.867719][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.875036][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.883899][ T4189] device bridge_slave_0 entered promiscuous mode [ 68.893517][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.901423][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.911084][ T4189] device bridge_slave_1 entered promiscuous mode [ 68.944990][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.952689][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.961423][ T4183] device bridge_slave_0 entered promiscuous mode [ 68.993556][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.001210][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.009859][ T4183] device bridge_slave_1 entered promiscuous mode [ 69.031028][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.070948][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.093545][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.105390][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.144995][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.153756][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.162647][ T4190] device bridge_slave_0 entered promiscuous mode [ 69.205024][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.212380][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.221152][ T4190] device bridge_slave_1 entered promiscuous mode [ 69.231129][ T4183] team0: Port device team_slave_0 added [ 69.244241][ T4189] team0: Port device team_slave_0 added [ 69.251219][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.260126][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.268730][ T4194] device bridge_slave_0 entered promiscuous mode [ 69.292959][ T4183] team0: Port device team_slave_1 added [ 69.307979][ T4189] team0: Port device team_slave_1 added [ 69.314042][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.321756][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.329926][ T4194] device bridge_slave_1 entered promiscuous mode [ 69.389715][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.415050][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.425562][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.433163][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.460303][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.481588][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.502548][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.523652][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.531164][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.559394][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.571189][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.579528][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.607913][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.647348][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.654931][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.682813][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.710457][ T4194] team0: Port device team_slave_0 added [ 69.721024][ T4194] team0: Port device team_slave_1 added [ 69.758162][ T4190] team0: Port device team_slave_0 added [ 69.784447][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.793374][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.822487][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.853929][ T4190] team0: Port device team_slave_1 added [ 69.879409][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.886950][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.918441][ T1325] Bluetooth: hci2: command 0x0409 tx timeout [ 69.926144][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.926659][ T4186] Bluetooth: hci0: command 0x0409 tx timeout [ 69.950796][ T4183] device hsr_slave_0 entered promiscuous mode [ 69.958470][ T4183] device hsr_slave_1 entered promiscuous mode [ 69.966502][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.975604][ T4183] Cannot create hsr debugfs directory [ 69.986188][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 69.992518][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 69.995902][ T2239] Bluetooth: hci3: command 0x0409 tx timeout [ 70.027707][ T4189] device hsr_slave_0 entered promiscuous mode [ 70.036411][ T4189] device hsr_slave_1 entered promiscuous mode [ 70.043164][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.051397][ T4189] Cannot create hsr debugfs directory [ 70.070897][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.078390][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.106585][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.120058][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.127731][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.154805][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.231485][ T4194] device hsr_slave_0 entered promiscuous mode [ 70.239085][ T4194] device hsr_slave_1 entered promiscuous mode [ 70.246317][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.254710][ T4194] Cannot create hsr debugfs directory [ 70.305309][ T4190] device hsr_slave_0 entered promiscuous mode [ 70.317667][ T4190] device hsr_slave_1 entered promiscuous mode [ 70.324569][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.332625][ T4190] Cannot create hsr debugfs directory [ 70.379946][ T4184] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.411046][ T4184] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.455014][ T4184] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.493241][ T4184] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.669242][ T4183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.687660][ T4183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.714864][ T4183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.744166][ T4183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.754090][ T4189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.777739][ T4189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.795484][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.816873][ T4189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.839570][ T4189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.870846][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.893237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.905077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.914579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.925191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.935562][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.942972][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.981634][ T4194] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.992180][ T4194] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.004732][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.014358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.023280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.036545][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.043879][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.056295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.065295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.101449][ T4194] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.112007][ T4194] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.124277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.133788][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.143452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.178493][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.188636][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.209509][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.219167][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.229125][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.238942][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.254373][ T4190] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.265029][ T4190] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.287614][ T4190] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.297833][ T4190] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.312913][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.365482][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.451898][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.482120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.491153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.509388][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.521953][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.532434][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.542136][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.549392][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.571574][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.588382][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.599816][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.609916][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.619979][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.627741][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.636412][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.645567][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.661140][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.673047][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.684266][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.705361][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.714588][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.737123][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.755421][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.767940][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.778007][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.787755][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.798154][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.808523][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.817820][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.827688][ T385] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.834901][ T385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.843090][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.852379][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.861674][ T385] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.868949][ T385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.878470][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.889257][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.898410][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.919440][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.943018][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.953282][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.966622][ T4227] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.973748][ T4227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.982997][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.992528][ T4249] Bluetooth: hci0: command 0x041b tx timeout [ 72.001450][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.002884][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.008604][ T4234] Bluetooth: hci2: command 0x041b tx timeout [ 72.017613][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.025378][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.038216][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.047524][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.057075][ T4227] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.064169][ T4227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.066357][ T4249] Bluetooth: hci4: command 0x041b tx timeout [ 72.072465][ T4234] Bluetooth: hci3: command 0x041b tx timeout [ 72.084462][ T4234] Bluetooth: hci1: command 0x041b tx timeout [ 72.084585][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.100935][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.112424][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.122586][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.140024][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.150615][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.159731][ T4227] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.167795][ T4227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.177092][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.187470][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.212632][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.226633][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.234967][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.246690][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.258754][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.268196][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.278933][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.288000][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.297181][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.307515][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.317166][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.326202][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.335006][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.355325][ T4183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.367091][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.413150][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.423047][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.433197][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.443087][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.453489][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.462461][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.471918][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.483065][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.492432][ T4227] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.500840][ T4227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.509536][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.518938][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.528120][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.539380][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.550784][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.566620][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.591865][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.603748][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.621251][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.641568][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.652190][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.667547][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.687301][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.718058][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.729777][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.781878][ T4184] device veth0_vlan entered promiscuous mode [ 72.815227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.826355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.852787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.887376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.906482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.919591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.929973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.940450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.964381][ T4184] device veth1_vlan entered promiscuous mode [ 72.976548][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.985152][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.000880][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.019217][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.034501][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.043879][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.080385][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.093744][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.116484][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.125640][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.134164][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.171756][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.190010][ T4184] device veth0_macvtap entered promiscuous mode [ 73.222634][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.235402][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.244874][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.255472][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.279854][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.298407][ T4184] device veth1_macvtap entered promiscuous mode [ 73.315463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.325492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.335364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.367727][ T4189] device veth0_vlan entered promiscuous mode [ 73.384725][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.394013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.403665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.420685][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.434230][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.443573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.452633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.466998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.479393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.491704][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.513281][ T4183] device veth0_vlan entered promiscuous mode [ 73.522973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.532650][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.541246][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.550649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.560207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.568257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.577791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.589000][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.603755][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.614530][ T4184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.625580][ T4184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.636685][ T4184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.645549][ T4184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.676953][ T4189] device veth1_vlan entered promiscuous mode [ 73.687629][ T4183] device veth1_vlan entered promiscuous mode [ 73.729477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.742554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.751693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.761609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.799653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.816868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.825266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.847623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.881186][ T4183] device veth0_macvtap entered promiscuous mode [ 73.894663][ T4194] device veth0_vlan entered promiscuous mode [ 73.908777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.924697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.944677][ T4189] device veth0_macvtap entered promiscuous mode [ 73.962631][ T4189] device veth1_macvtap entered promiscuous mode [ 73.972125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.982857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.993938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.004276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.015216][ T4183] device veth1_macvtap entered promiscuous mode [ 74.056883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.065313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.066490][ T4239] Bluetooth: hci2: command 0x040f tx timeout [ 74.080271][ T4239] Bluetooth: hci0: command 0x040f tx timeout [ 74.080395][ T4194] device veth1_vlan entered promiscuous mode [ 74.125272][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.127223][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.144201][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.153769][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.155967][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 74.171745][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.179829][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 74.186161][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 74.193531][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.205559][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.216401][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.232164][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.244311][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.258376][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.267378][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.275491][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.283821][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.293154][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.302134][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.312381][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.323315][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.332456][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.376860][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.389493][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.402719][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.421135][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.430945][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.440329][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.449595][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.460344][ T4194] device veth0_macvtap entered promiscuous mode [ 74.476534][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.489665][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.500093][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.510970][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.523043][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.533674][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.542603][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.552276][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.562790][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.584793][ T4194] device veth1_macvtap entered promiscuous mode [ 74.593698][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.603491][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.613280][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.622463][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.632305][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.641831][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.650148][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.661200][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.671035][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.680126][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.689515][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.716875][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.725302][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.735217][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.755029][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.766269][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.777153][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.788703][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.800704][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.812986][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.820959][ T4190] device veth0_vlan entered promiscuous mode [ 74.848673][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.857269][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.869279][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.883149][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.894556][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.907173][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.920317][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.931795][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.945620][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.960717][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.988720][ T4190] device veth1_vlan entered promiscuous mode [ 75.023466][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.036920][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.047314][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.061072][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.077551][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.089212][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.101013][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.233016][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.260064][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.290149][ T4274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.298178][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.298785][ T4274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.313643][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.323704][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.333688][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.343537][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.355067][ T4190] device veth0_macvtap entered promiscuous mode [ 75.385756][ T4190] device veth1_macvtap entered promiscuous mode [ 75.420432][ T4295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 75.485515][ T4227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.549409][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.554656][ T4227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.566347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.629851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.689978][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.727462][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.748094][ T4300] loop7: detected capacity change from 0 to 16384 [ 75.753489][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.832294][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.849765][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.872558][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.904034][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.928380][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.975315][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.043639][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.063173][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.078847][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.079232][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.101421][ T4301] loop_set_status: loop7 () has still dirty pages (nrpages=353) [ 76.143282][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.159640][ T4234] Bluetooth: hci0: command 0x0419 tx timeout [ 76.172129][ T4234] Bluetooth: hci2: command 0x0419 tx timeout [ 76.187584][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.206229][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.227867][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.240689][ T4174] Bluetooth: hci1: command 0x0419 tx timeout [ 76.244489][ T4234] Bluetooth: hci3: command 0x0419 tx timeout [ 76.265989][ T4234] Bluetooth: hci4: command 0x0419 tx timeout [ 76.273307][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.315844][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.345811][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.375867][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.402909][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.414501][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.433267][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.478442][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.532828][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.556833][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.577981][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.586377][ T26] audit: type=1326 audit(1760725436.709:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4309 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e541f8fc9 code=0x7ffc0000 [ 76.618435][ T26] audit: type=1326 audit(1760725436.709:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4309 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e541f8fc9 code=0x7ffc0000 [ 76.669467][ T4190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.690198][ T26] audit: type=1326 audit(1760725436.749:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4309 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e541f8fc9 code=0x7ffc0000 [ 76.721896][ T4190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.761866][ T4190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.792553][ T4190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.810033][ T26] audit: type=1326 audit(1760725436.749:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4309 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e541f8fc9 code=0x7ffc0000 [ 76.842401][ T26] audit: type=1326 audit(1760725436.749:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4309 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e541f8fc9 code=0x7ffc0000 [ 76.887164][ T26] audit: type=1326 audit(1760725436.749:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4309 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e541f8fc9 code=0x7ffc0000 [ 76.970841][ T4316] loop3: detected capacity change from 0 to 512 [ 76.994754][ T26] audit: type=1326 audit(1760725436.769:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4309 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e541f8fc9 code=0x7ffc0000 [ 77.019042][ T26] audit: type=1326 audit(1760725436.769:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4309 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e541f8fc9 code=0x7ffc0000 [ 77.045549][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.060496][ T4315] loop1: detected capacity change from 0 to 2048 [ 77.068731][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.079057][ T26] audit: type=1326 audit(1760725436.779:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4309 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e541f8fc9 code=0x7ffc0000 [ 77.208169][ T4318] loop0: detected capacity change from 0 to 256 [ 77.353689][ T4316] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 77.403958][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.693308][ T26] audit: type=1326 audit(1760725436.779:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4309 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e541f8fc9 code=0x7ffc0000 [ 77.751543][ T4315] loop1: p1 < > p3 p4 < > [ 77.789412][ T4315] loop1: p3 start 4284289 is beyond EOD, truncated [ 77.878668][ T4316] EXT4-fs (loop3): 1 orphan inode deleted [ 77.884854][ T4316] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpjquota=,nobarrier,,errors=continue. Quota mode: writeback. [ 77.903701][ T4316] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.061518][ T4319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.109251][ T4319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.139881][ T4326] loop0: detected capacity change from 0 to 512 [ 78.187599][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.251925][ T4274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.321462][ T4328] loop2: detected capacity change from 0 to 512 [ 78.337037][ T4326] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 78.351126][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 78.371096][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 78.382793][ T4332] loop3: detected capacity change from 0 to 512 [ 78.384537][ T4274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.405534][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.424835][ T4326] EXT4-fs (loop0): orphan cleanup on readonly fs [ 78.463983][ T4326] EXT4-fs error (device loop0): ext4_do_update_inode:5204: inode #16: comm syz.0.10: corrupted inode contents [ 78.495926][ T4326] EXT4-fs (loop0): Remounting filesystem read-only [ 78.548998][ T4326] EXT4-fs error (device loop0): ext4_dirty_inode:6040: inode #16: comm syz.0.10: mark_inode_dirty error [ 78.555389][ T4332] EXT4-fs error (device loop3): ext4_init_orphan_info:586: comm syz.3.12: inode #0: comm syz.3.12: iget: illegal inode # [ 78.574098][ T4328] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 78.579389][ T4332] EXT4-fs (loop3): get orphan inode failed [ 78.593428][ T4326] EXT4-fs (loop0): Remounting filesystem read-only [ 78.605423][ T4332] EXT4-fs (loop3): mount failed [ 78.617687][ T4328] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.629641][ T4326] EXT4-fs error (device loop0): ext4_do_update_inode:5204: inode #16: comm syz.0.10: corrupted inode contents [ 78.689743][ T4326] EXT4-fs (loop0): Remounting filesystem read-only [ 78.713203][ T4326] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.10: mark_inode_dirty error [ 78.759153][ T4326] EXT4-fs (loop0): Remounting filesystem read-only [ 78.776086][ T4342] loop4: detected capacity change from 0 to 2048 [ 78.863590][ T4326] EXT4-fs error (device loop0): ext4_do_update_inode:5204: inode #16: comm syz.0.10: corrupted inode contents [ 78.917120][ T4326] EXT4-fs (loop0): Remounting filesystem read-only [ 78.931671][ T4326] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 79.015008][ T4326] EXT4-fs (loop0): Remounting filesystem read-only [ 79.033005][ T4342] loop4: detected capacity change from 0 to 512 [ 79.042566][ T4326] EXT4-fs error (device loop0): ext4_do_update_inode:5204: inode #16: comm syz.0.10: corrupted inode contents [ 79.076958][ T4326] EXT4-fs (loop0): Remounting filesystem read-only [ 79.098521][ T4342] ======================================================= [ 79.098521][ T4342] WARNING: The mand mount option has been deprecated and [ 79.098521][ T4342] and is ignored by this kernel. Remove the mand [ 79.098521][ T4342] option from the mount to silence this warning. [ 79.098521][ T4342] ======================================================= [ 79.109731][ T4326] EXT4-fs error (device loop0): ext4_truncate:4273: inode #16: comm syz.0.10: mark_inode_dirty error [ 79.250865][ T4326] EXT4-fs (loop0): Remounting filesystem read-only [ 79.264882][ T4326] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 79.312866][ T4348] loop3: detected capacity change from 0 to 128 [ 79.374132][ T4326] EXT4-fs (loop0): Remounting filesystem read-only [ 79.389431][ T4342] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 79.417087][ T4326] EXT4-fs (loop0): 1 truncate cleaned up [ 79.430730][ T4342] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.445494][ T4326] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodioread_nolock,. Quota mode: writeback. [ 79.452839][ T4354] netlink: 7 bytes leftover after parsing attributes in process `syz.2.15'. [ 79.475153][ T4342] netlink: 'syz.4.5': attribute type 27 has an invalid length. [ 79.506809][ T4348] EXT4-fs (loop3): mounted filesystem without journal. Opts: nouid32,delalloc,,errors=continue. Quota mode: none. [ 79.520277][ T4354] netlink: 60 bytes leftover after parsing attributes in process `syz.2.15'. [ 79.551162][ T4348] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.590407][ T4361] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 79.952785][ T4354] netlink: 7 bytes leftover after parsing attributes in process `syz.2.15'. [ 80.009389][ T4354] netlink: 60 bytes leftover after parsing attributes in process `syz.2.15'. [ 80.164429][ T4368] loop0: detected capacity change from 0 to 128 [ 80.259643][ T4368] attempt to access beyond end of device [ 80.259643][ T4368] loop0: rw=2049, want=250, limit=128 [ 80.659038][ T4380] loop3: detected capacity change from 0 to 2048 [ 80.730576][ T4385] loop0: detected capacity change from 0 to 512 [ 80.765279][ T4380] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,dioread_lock,barrier,bsdgroups,inode_readahead_blks=0x0000000000002000,. Quota mode: none. [ 80.807658][ T4385] EXT4-fs error (device loop0): ext4_init_orphan_info:586: comm syz.0.25: inode #0: comm syz.0.25: iget: illegal inode # [ 80.821293][ T4380] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.837188][ T4385] EXT4-fs (loop0): get orphan inode failed [ 80.849650][ T4385] EXT4-fs (loop0): mount failed [ 81.002493][ T4394] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.24: bg 0: block 345: padding at end of block bitmap is not set [ 81.090297][ T4342] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.099677][ T4342] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.121031][ T4394] EXT4-fs (loop3): Remounting filesystem read-only [ 82.051671][ T4423] hub 9-0:1.0: USB hub found [ 82.061282][ T4423] hub 9-0:1.0: 1 port detected [ 82.724584][ T4342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.768783][ T4342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.313617][ T4342] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.323502][ T4342] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.332985][ T4342] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.342361][ T4342] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.473428][ T4342] syz.4.5 (4342) used greatest stack depth: 21024 bytes left [ 83.502367][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 83.513513][ T4359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.522477][ T4359] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.533195][ T4359] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 83.570983][ T4359] syz.4.5 (4359) used greatest stack depth: 19808 bytes left [ 84.820425][ T23] cfg80211: failed to load regulatory.db [ 84.904636][ T4448] netlink: 'syz.2.40': attribute type 1 has an invalid length. [ 84.941086][ T4448] netlink: 224 bytes leftover after parsing attributes in process `syz.2.40'. [ 84.982789][ T4451] loop3: detected capacity change from 0 to 1764 [ 85.010616][ T4454] loop1: detected capacity change from 0 to 512 [ 85.072876][ T4453] ODEBUG: Out of memory. ODEBUG disabled [ 85.166691][ T4454] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 85.177941][ T4454] EXT4-fs (loop1): orphan cleanup on readonly fs [ 85.393103][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 85.486545][ T4454] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #16: comm syz.1.43: corrupted inode contents [ 85.527263][ T4454] EXT4-fs (loop1): Remounting filesystem read-only [ 85.534063][ T4454] EXT4-fs error (device loop1): ext4_dirty_inode:6040: inode #16: comm syz.1.43: mark_inode_dirty error [ 85.556863][ T4464] loop2: detected capacity change from 0 to 512 [ 85.566387][ T4454] EXT4-fs (loop1): Remounting filesystem read-only [ 85.588301][ T4454] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #16: comm syz.1.43: corrupted inode contents [ 85.634571][ T4454] EXT4-fs (loop1): Remounting filesystem read-only [ 85.642409][ T4454] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.43: mark_inode_dirty error [ 85.665337][ T4454] EXT4-fs (loop1): Remounting filesystem read-only [ 85.679888][ T4454] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #16: comm syz.1.43: corrupted inode contents [ 85.724247][ T4454] EXT4-fs (loop1): Remounting filesystem read-only [ 85.733799][ T4454] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 85.746365][ T4454] EXT4-fs (loop1): Remounting filesystem read-only [ 85.753081][ T4454] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #16: comm syz.1.43: corrupted inode contents [ 85.777784][ T4464] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=,nodiscard,min_batch_time=0x00000000000003fe,,errors=continue. Quota mode: none. [ 85.838772][ T4424] Bluetooth: hci5: Frame reassembly failed (-84) [ 85.847662][ T4454] EXT4-fs (loop1): Remounting filesystem read-only [ 85.854418][ T4454] EXT4-fs error (device loop1): ext4_truncate:4273: inode #16: comm syz.1.43: mark_inode_dirty error [ 85.874216][ T4454] EXT4-fs (loop1): Remounting filesystem read-only [ 85.885867][ T4454] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 85.945870][ T4454] EXT4-fs (loop1): Remounting filesystem read-only [ 85.961071][ T4454] EXT4-fs (loop1): 1 truncate cleaned up [ 85.972450][ T4473] netlink: 272 bytes leftover after parsing attributes in process `syz.0.48'. [ 85.996349][ T4454] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodioread_nolock,. Quota mode: writeback. [ 86.131688][ T26] kauditd_printk_skb: 268 callbacks suppressed [ 86.131704][ T26] audit: type=1326 audit(1760725446.259:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4476 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e2c65fc9 code=0x7ffc0000 [ 86.213176][ T26] audit: type=1326 audit(1760725446.289:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4476 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e2c65fc9 code=0x7ffc0000 [ 86.477061][ T4483] loop4: detected capacity change from 0 to 512 [ 86.484810][ T26] audit: type=1326 audit(1760725446.289:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4476 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7fe9e2c65fc9 code=0x7ffc0000 [ 86.599360][ T26] audit: type=1326 audit(1760725446.699:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4476 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e2c65fc9 code=0x7ffc0000 [ 86.626065][ T26] audit: type=1326 audit(1760725446.699:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4476 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e2c65fc9 code=0x7ffc0000 [ 86.726145][ T26] audit: type=1326 audit(1760725446.859:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4476 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fe9e2c65fc9 code=0x7ffc0000 [ 86.730090][ T4483] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,noinit_itable,abort,bsdgroups,,errors=continue. Quota mode: writeback. [ 86.771428][ T4492] loop1: detected capacity change from 0 to 1024 [ 86.851057][ T4492] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,nolazytime,discard,,errors=continue. Quota mode: none. [ 86.882857][ T4483] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.940805][ T4483] Quota error (device loop4): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 86.954595][ T4483] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 86.964961][ T4483] EXT4-fs error (device loop4): ext4_acquire_dquot:6209: comm syz.4.52: Failed to acquire dquot type 0 [ 87.181818][ T4505] netlink: 'syz.1.59': attribute type 10 has an invalid length. [ 87.227331][ T4507] loop2: detected capacity change from 0 to 512 [ 87.260075][ T4505] team0: Port device dummy0 added [ 87.287166][ T4508] netlink: 'syz.1.59': attribute type 10 has an invalid length. [ 87.326271][ T4507] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 87.334359][ T26] audit: type=1326 audit(1760725447.459:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4476 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e2c65fc9 code=0x7ffc0000 [ 87.367984][ T26] audit: type=1326 audit(1760725447.459:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4476 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e2c65fc9 code=0x7ffc0000 [ 87.392570][ T4507] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.393308][ T4508] team0: Port device dummy0 removed [ 87.413277][ T4508] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 87.468031][ T4507] netlink: 'syz.2.60': attribute type 27 has an invalid length. [ 87.669931][ T4517] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 87.672168][ T4517] EXT4-fs error (device loop2): ext4_do_update_inode:5204: inode #2: comm syz.2.60: corrupted inode contents [ 87.674917][ T4517] EXT4-fs error (device loop2): ext4_dirty_inode:6040: inode #2: comm syz.2.60: mark_inode_dirty error [ 87.705231][ T4517] EXT4-fs error (device loop2): ext4_do_update_inode:5204: inode #2: comm syz.2.60: corrupted inode contents [ 87.916681][ T4293] Bluetooth: hci5: command 0x1003 tx timeout [ 87.928784][ T4198] Bluetooth: hci5: sending frame failed (-49) [ 88.569423][ T4535] loop1: detected capacity change from 0 to 764 [ 88.588382][ T4507] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.595957][ T4507] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.688160][ T4535] rock: directory entry would overflow storage [ 88.695282][ T4535] rock: sig=0x5245, size=8, remaining=5 [ 88.711645][ T4538] loop0: detected capacity change from 0 to 256 [ 88.834746][ T4538] FAT-fs (loop0): Directory bread(block 64) failed [ 88.861241][ T4538] FAT-fs (loop0): Directory bread(block 65) failed [ 88.884644][ T4538] FAT-fs (loop0): Directory bread(block 66) failed [ 88.900986][ T4538] FAT-fs (loop0): Directory bread(block 67) failed [ 88.912534][ T4538] FAT-fs (loop0): Directory bread(block 68) failed [ 88.921222][ T4538] FAT-fs (loop0): Directory bread(block 69) failed [ 88.928365][ T4538] FAT-fs (loop0): Directory bread(block 70) failed [ 88.935536][ T4538] FAT-fs (loop0): Directory bread(block 71) failed [ 88.944647][ T4538] FAT-fs (loop0): Directory bread(block 72) failed [ 88.953782][ T4538] FAT-fs (loop0): Directory bread(block 73) failed [ 89.346773][ T4546] loop0: detected capacity change from 0 to 2048 [ 89.368246][ T4546] EXT4-fs (loop0): Ignoring removed oldalloc option [ 89.421699][ T4546] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,oldalloc,,errors=continue. Quota mode: none. [ 89.601242][ T4507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.640882][ T4507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.760881][ T4507] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.771814][ T4507] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.781762][ T4507] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.806993][ T4507] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.988829][ T23] Bluetooth: hci5: command 0x1001 tx timeout [ 89.995491][ T4198] Bluetooth: hci5: sending frame failed (-49) [ 90.107902][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 90.115247][ T4564] netlink: 20 bytes leftover after parsing attributes in process `syz.4.75'. [ 90.124300][ T4513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.126436][ T4513] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.144696][ T4513] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 90.410993][ T4565] syz.4.75 uses obsolete (PF_INET,SOCK_PACKET) [ 90.447727][ T4568] program syz.0.77 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.796400][ T4579] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.902314][ T4586] 9pnet: Insufficient options for proto=fd [ 91.698262][ T4589] process 'syz.2.85' launched '/dev/fd/3' with NULL argv: empty string added [ 91.758181][ T4592] atomic_op ffff88807364f998 conn xmit_atomic 0000000000000000 [ 91.788671][ T4579] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.911800][ T4579] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.019160][ T4579] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.101440][ T4293] Bluetooth: hci5: command 0x1009 tx timeout [ 92.264150][ T4579] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.282898][ T4579] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.308168][ T4579] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.322719][ T4579] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.890507][ T4628] loop2: detected capacity change from 0 to 512 [ 92.892005][ T4626] 9pnet: Could not find request transport: fd, priority 10 [ 95.068676][ T26] audit: type=1326 audit(1760725455.199:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4676 comm="syz.2.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974baa5fc9 code=0x7ffc0000 [ 95.111913][ T26] audit: type=1326 audit(1760725455.199:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4676 comm="syz.2.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974baa5fc9 code=0x7ffc0000 [ 95.151348][ T26] audit: type=1326 audit(1760725455.199:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4676 comm="syz.2.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f974baa5fc9 code=0x7ffc0000 [ 95.177917][ T26] audit: type=1326 audit(1760725455.199:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4676 comm="syz.2.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974baa5fc9 code=0x7ffc0000 [ 95.214757][ T26] audit: type=1326 audit(1760725455.199:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4676 comm="syz.2.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974baa5fc9 code=0x7ffc0000 [ 95.254646][ T4683] loop0: detected capacity change from 0 to 2048 [ 95.280505][ T26] audit: type=1326 audit(1760725455.199:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4676 comm="syz.2.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f974baa5fc9 code=0x7ffc0000 [ 95.376989][ T4683] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 95.420307][ T26] audit: type=1800 audit(1760725455.549:294): pid=4683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.121" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 95.454646][ T26] audit: type=1326 audit(1760725455.579:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4676 comm="syz.2.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974baa5fc9 code=0x7ffc0000 [ 95.468110][ T4688] loop4: detected capacity change from 0 to 1024 [ 95.495262][ T26] audit: type=1326 audit(1760725455.579:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4676 comm="syz.2.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974baa5fc9 code=0x7ffc0000 [ 95.586639][ T4688] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 95.665351][ T4691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.123'. [ 96.045430][ T4293] tipc: Node number set to 2886997007 [ 96.658248][ T26] audit: type=1326 audit(1760725456.789:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4710 comm="syz.0.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e2c65fc9 code=0x7ffc0000 [ 97.374568][ T4728] netlink: 28 bytes leftover after parsing attributes in process `syz.4.138'. [ 97.398804][ T4728] netlink: 28 bytes leftover after parsing attributes in process `syz.4.138'. [ 97.674343][ T4744] loop2: detected capacity change from 0 to 128 [ 98.000066][ T4740] infiniband syz!: set active [ 98.019159][ T4740] infiniband syz!: added team_slave_0 [ 98.179134][ T4740] RDS/IB: syz!: added [ 98.218591][ T4740] smc: adding ib device syz! with port count 1 [ 98.263271][ T4740] smc: ib device syz! port 1 has pnetid [ 99.130934][ T4771] loop0: detected capacity change from 0 to 512 [ 99.225072][ T4772] loop2: detected capacity change from 0 to 512 [ 99.252108][ T4771] EXT4-fs (loop0): Ignoring removed nobh option [ 99.292443][ T4773] bridge0: port 3(gretap0) entered blocking state [ 99.306495][ T4773] bridge0: port 3(gretap0) entered disabled state [ 99.332578][ T4772] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,minixdf,barrier=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 99.344111][ T4773] device gretap0 entered promiscuous mode [ 99.356863][ T4773] bridge0: port 3(gretap0) entered blocking state [ 99.363747][ T4773] bridge0: port 3(gretap0) entered forwarding state [ 99.386056][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.415366][ T4772] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.435239][ T4771] EXT4-fs error (device loop0): ext4_do_update_inode:5204: inode #3: comm syz.0.157: corrupted inode contents [ 99.460139][ T4777] device gretap0 left promiscuous mode [ 99.475691][ T4771] EXT4-fs (loop0): Remounting filesystem read-only [ 99.517020][ T4771] EXT4-fs error (device loop0): ext4_dirty_inode:6040: inode #3: comm syz.0.157: mark_inode_dirty error [ 99.539499][ T4777] bridge0: port 3(gretap0) entered disabled state [ 99.586386][ T4771] EXT4-fs (loop0): Remounting filesystem read-only [ 99.594929][ T4771] EXT4-fs error (device loop0): ext4_do_update_inode:5204: inode #3: comm syz.0.157: corrupted inode contents [ 99.642405][ T4771] EXT4-fs (loop0): Remounting filesystem read-only [ 99.649499][ T4771] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #3: comm syz.0.157: mark_inode_dirty error [ 99.682826][ T4771] EXT4-fs (loop0): Remounting filesystem read-only [ 99.692154][ T4771] EXT4-fs error (device loop0): ext4_acquire_dquot:6209: comm syz.0.157: Failed to acquire dquot type 0 [ 99.708448][ T4771] EXT4-fs (loop0): Remounting filesystem read-only [ 99.751078][ T4771] EXT4-fs error (device loop0): ext4_do_update_inode:5204: inode #16: comm syz.0.157: corrupted inode contents [ 99.785403][ T4771] EXT4-fs (loop0): Remounting filesystem read-only [ 99.798601][ T4780] netlink: 24 bytes leftover after parsing attributes in process `syz.2.158'. [ 99.811442][ T4771] EXT4-fs error (device loop0): ext4_dirty_inode:6040: inode #16: comm syz.0.157: mark_inode_dirty error [ 99.840856][ T4771] EXT4-fs (loop0): Remounting filesystem read-only [ 99.867999][ T4771] EXT4-fs error (device loop0): ext4_do_update_inode:5204: inode #16: comm syz.0.157: corrupted inode contents [ 99.913988][ T4771] EXT4-fs (loop0): Remounting filesystem read-only [ 99.932242][ T4771] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.157: mark_inode_dirty error [ 99.966317][ T4771] EXT4-fs (loop0): Remounting filesystem read-only [ 99.985317][ T4771] EXT4-fs error (device loop0): ext4_do_update_inode:5204: inode #16: comm syz.0.157: corrupted inode contents [ 100.026253][ T4771] EXT4-fs (loop0): Remounting filesystem read-only [ 100.033213][ T4782] loop2: detected capacity change from 0 to 2048 [ 100.060630][ T4771] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 100.090409][ T4782] loop2: p1 < > p3 p4 < > [ 100.100688][ T4771] EXT4-fs (loop0): Remounting filesystem read-only [ 100.100718][ T4782] loop2: partition table partially beyond EOD, [ 100.126111][ T4771] EXT4-fs error (device loop0): ext4_do_update_inode:5204: inode #16: comm syz.0.157: corrupted inode contents [ 100.128616][ T4782] truncated [ 100.156644][ T4771] EXT4-fs (loop0): Remounting filesystem read-only [ 100.172304][ T4782] loop2: p1 start 8388352 is beyond EOD, truncated [ 100.176231][ T4771] EXT4-fs error (device loop0): ext4_truncate:4273: inode #16: comm syz.0.157: mark_inode_dirty error [ 100.223175][ T4771] EXT4-fs (loop0): Remounting filesystem read-only [ 100.247767][ T4782] loop2: p3 size 16777216 extends beyond EOD, truncated [ 100.325936][ T4771] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 100.362044][ T4771] EXT4-fs (loop0): Remounting filesystem read-only [ 100.415575][ T4771] EXT4-fs (loop0): 1 truncate cleaned up [ 100.457121][ T4771] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nobh,. Quota mode: writeback. [ 100.495959][ T4771] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.548271][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 100.557699][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 100.753082][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 100.818325][ T4201] udevd[4201]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 100.834514][ T4334] udevd[4334]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 100.952585][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 101.023754][ T4334] udevd[4334]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 101.281493][ T4797] loop2: detected capacity change from 0 to 256 [ 102.463522][ T4826] loop1: detected capacity change from 0 to 512 [ 102.493871][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 102.557922][ T4826] EXT4-fs (loop1): Ignoring removed nobh option [ 102.868583][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #240!!! [ 102.921353][ T4826] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #3: comm syz.1.174: corrupted inode contents [ 102.939809][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 102.960157][ T4826] EXT4-fs error (device loop1): ext4_dirty_inode:6040: inode #3: comm syz.1.174: mark_inode_dirty error [ 102.986817][ T4249] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 102.994902][ T4249] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.002520][ T4249] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.011060][ T4249] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.018677][ T4249] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.026627][ T4249] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.034278][ T4249] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.042163][ T4249] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.042979][ T4826] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #3: comm syz.1.174: corrupted inode contents [ 103.049791][ T4249] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.070832][ T4249] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.079086][ T4249] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.086674][ T4249] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.094703][ T4249] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.100067][ T4826] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #3: comm syz.1.174: mark_inode_dirty error [ 103.102683][ T4249] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.121909][ T4249] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.130273][ T4249] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.137861][ T4249] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.145394][ T4249] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.148781][ T4826] __quota_error: 8 callbacks suppressed [ 103.148806][ T4826] Quota error (device loop1): write_blk: dquota write failed [ 103.153148][ T4249] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.174094][ T4249] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.181747][ T4249] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.182176][ T4826] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 103.190099][ T4249] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.207879][ T4249] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.216221][ T4249] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.223934][ T4249] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.231870][ T4249] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.239443][ T4826] EXT4-fs error (device loop1): ext4_acquire_dquot:6209: comm syz.1.174: Failed to acquire dquot type 0 [ 103.239508][ T4249] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.258278][ T4249] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.265842][ T4249] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.273606][ T4249] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.280961][ T4826] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #16: comm syz.1.174: corrupted inode contents [ 103.281412][ T4249] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.301443][ T4249] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.316440][ T4249] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 103.321004][ T4826] EXT4-fs error (device loop1): ext4_dirty_inode:6040: inode #16: comm syz.1.174: mark_inode_dirty error [ 103.376209][ T4826] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #16: comm syz.1.174: corrupted inode contents [ 103.402553][ T4826] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.174: mark_inode_dirty error [ 103.497602][ T4826] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #16: comm syz.1.174: corrupted inode contents [ 103.533039][ T4826] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 103.558250][ T4826] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #16: comm syz.1.174: corrupted inode contents [ 103.612287][ T4826] EXT4-fs error (device loop1): ext4_truncate:4273: inode #16: comm syz.1.174: mark_inode_dirty error [ 103.634766][ T4836] fido_id[4836]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 103.655481][ T4826] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 103.754577][ T4840] loop2: detected capacity change from 0 to 256 [ 104.147421][ T4826] EXT4-fs (loop1): 1 truncate cleaned up [ 104.345689][ T4826] EXT4-fs (loop1): mounted filesystem without journal. Opts: resuid=0x0000000000000000,nobh,,errors=continue. Quota mode: writeback. [ 104.452613][ T4826] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.835667][ T4849] lo speed is unknown, defaulting to 1000 [ 104.962176][ T4858] netlink: 12 bytes leftover after parsing attributes in process `syz.1.185'. [ 105.309271][ T4870] loop4: detected capacity change from 0 to 512 [ 105.400206][ T4867] Zero length message leads to an empty skb [ 105.413548][ T4870] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 105.456607][ T4870] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.534249][ T4870] EXT4-fs error (device loop4): ext4_do_update_inode:5204: inode #2: comm syz.4.189: corrupted inode contents [ 105.568706][ T4870] EXT4-fs error (device loop4): ext4_dirty_inode:6040: inode #2: comm syz.4.189: mark_inode_dirty error [ 105.589672][ T4870] EXT4-fs error (device loop4): ext4_do_update_inode:5204: inode #2: comm syz.4.189: corrupted inode contents [ 105.615875][ T4870] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #2: comm syz.4.189: mark_inode_dirty error [ 106.320089][ T4891] loop4: detected capacity change from 0 to 736 [ 106.337271][ T4892] loop0: detected capacity change from 0 to 512 [ 106.419708][ T4892] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 106.456011][ T4892] EXT4-fs (loop0): orphan cleanup on readonly fs [ 106.512110][ T4892] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 16777216 out of range 0-5 [ 106.534349][ T4892] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 106.585313][ T4892] EXT4-fs error (device loop0): ext4_acquire_dquot:6209: comm syz.0.193: Failed to acquire dquot type 1 [ 106.612001][ T4892] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.193: bg 0: block 40: padding at end of block bitmap is not set [ 106.660076][ T4892] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 106.756258][ T4892] EXT4-fs (loop0): 1 truncate cleaned up [ 106.762247][ T4892] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 106.804718][ T4906] loop2: detected capacity change from 0 to 1024 [ 106.943642][ T4906] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nobarrier,noinit_itable,,errors=continue. Quota mode: none. [ 106.992830][ T4906] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 107.012609][ T4906] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 107.027583][ T4906] EXT4-fs (loop2): This should not happen!! Data will be lost [ 107.027583][ T4906] [ 107.038711][ T4906] EXT4-fs (loop2): Total free blocks count 0 [ 107.044847][ T4906] EXT4-fs (loop2): Free/Dirty block details [ 107.055689][ T4906] EXT4-fs (loop2): free_blocks=68451041280 [ 107.062754][ T4906] EXT4-fs (loop2): dirty_blocks=80 [ 107.068325][ T4906] EXT4-fs (loop2): Block reservation details [ 107.074455][ T4906] EXT4-fs (loop2): i_reserved_data_blocks=5 [ 107.105153][ T26] audit: type=1326 audit(1760725467.229:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4912 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e541f8fc9 code=0x7ffc0000 [ 107.151137][ T4415] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 68 with error 28 [ 107.187845][ T4415] EXT4-fs (loop2): This should not happen!! Data will be lost [ 107.187845][ T4415] [ 107.207936][ T26] audit: type=1326 audit(1760725467.259:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4912 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f8e541f8fc9 code=0x7ffc0000 [ 107.236519][ T26] audit: type=1326 audit(1760725467.259:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4912 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e541f8fc9 code=0x7ffc0000 [ 107.265589][ T26] audit: type=1326 audit(1760725467.259:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4912 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e541f8fc9 code=0x7ffc0000 [ 107.499887][ T4923] loop0: detected capacity change from 0 to 256 [ 108.531820][ T4928] netlink: 'syz.1.206': attribute type 12 has an invalid length. [ 109.113079][ T4935] xt_hashlimit: max too large, truncated to 1048576 [ 109.383643][ T4935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.207'. [ 109.444416][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 109.485757][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 109.496333][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 109.548366][ T4935] syz.0.207 (4935) used greatest stack depth: 18336 bytes left [ 109.822421][ T26] audit: type=1326 audit(1760725469.949:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4944 comm="syz.2.212" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f974baa5fc9 code=0x0 [ 109.829781][ T1325] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 109.916441][ T1325] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 109.937391][ T26] audit: type=1326 audit(1760725470.019:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4938 comm="syz.0.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e2c65fc9 code=0x7ffc0000 [ 109.945890][ T1325] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 110.015573][ T26] audit: type=1326 audit(1760725470.019:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4938 comm="syz.0.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7fe9e2c65fc9 code=0x7ffc0000 [ 110.038391][ T1325] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 110.069389][ T1325] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 110.089261][ T1325] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 110.089591][ T26] audit: type=1326 audit(1760725470.019:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4938 comm="syz.0.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e2c65fc9 code=0x7ffc0000 [ 110.118488][ T1325] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 110.135188][ T1325] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 110.154004][ T4955] loop4: detected capacity change from 0 to 4096 [ 110.159693][ T1325] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 110.160604][ T26] audit: type=1326 audit(1760725470.019:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4938 comm="syz.0.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fe9e2c65fc9 code=0x7ffc0000 [ 110.184163][ T1325] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 110.193573][ T26] audit: type=1326 audit(1760725470.019:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4938 comm="syz.0.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e2c65fc9 code=0x7ffc0000 [ 110.221548][ T26] audit: type=1326 audit(1760725470.019:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4938 comm="syz.0.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fe9e2c65fc9 code=0x7ffc0000 [ 110.226653][ T1325] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 110.245390][ T26] audit: type=1326 audit(1760725470.019:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4938 comm="syz.0.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e2c65fc9 code=0x7ffc0000 [ 110.277194][ T26] audit: type=1326 audit(1760725470.019:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4938 comm="syz.0.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe9e2c65fc9 code=0x7ffc0000 [ 110.302529][ T26] audit: type=1326 audit(1760725470.019:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4938 comm="syz.0.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e2c65fc9 code=0x7ffc0000 [ 110.310624][ T1325] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 110.341732][ T1325] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 110.352563][ T1325] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 110.366991][ T1325] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 110.375369][ T1325] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 110.390761][ T4955] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 110.390789][ T1325] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 110.390817][ T1325] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 110.431173][ T4955] [ 110.433686][ T4955] ====================================================== [ 110.438471][ T1325] hid-generic 0003:0003:0000.0002: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 110.440998][ T4955] WARNING: possible circular locking dependency detected [ 110.441022][ T4955] syzkaller #0 Not tainted [ 110.461753][ T4955] ------------------------------------------------------ [ 110.468806][ T4955] syz.4.213/4955 is trying to acquire lock: [ 110.474733][ T4955] ffff88805ffb0428 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410 [ 110.483989][ T4955] [ 110.483989][ T4955] but task is already holding lock: [ 110.491478][ T4955] ffff88805ffe9668 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x8b2/0x1b30 [ 110.501168][ T4955] [ 110.501168][ T4955] which lock already depends on the new lock. [ 110.501168][ T4955] [ 110.511690][ T4955] [ 110.511690][ T4955] the existing dependency chain (in reverse order) is: [ 110.520727][ T4955] [ 110.520727][ T4955] -> #2 (&ei->i_data_sem/2){++++}-{3:3}: [ 110.528595][ T4955] down_read+0x44/0x2e0 [ 110.533550][ T4955] ext4_map_blocks+0x32f/0x1b30 [ 110.538967][ T4955] ext4_getblk+0x16d/0x630 [ 110.544044][ T4955] ext4_bread+0x26/0x180 [ 110.548927][ T4955] ext4_quota_write+0x230/0x570 [ 110.554456][ T4955] get_free_dqblk+0x387/0x7d0 [ 110.559718][ T4955] do_insert_tree+0xc9a/0x1970 [ 110.565056][ T4955] do_insert_tree+0x5b1/0x1970 [ 110.570677][ T4955] do_insert_tree+0x5b1/0x1970 [ 110.576018][ T4955] do_insert_tree+0x5b1/0x1970 [ 110.581347][ T4955] qtree_write_dquot+0x361/0x4b0 [ 110.586855][ T4955] v2_write_dquot+0x108/0x190 [ 110.592099][ T4955] dquot_acquire+0x2d5/0x520 [ 110.597510][ T4955] ext4_acquire_dquot+0x2d9/0x4a0 [ 110.603320][ T4955] dqget+0x778/0xeb0 [ 110.607902][ T4955] __dquot_initialize+0x328/0xcb0 [ 110.613798][ T4955] ext4_create+0x8c/0x460 [ 110.618923][ T4955] path_openat+0x11e1/0x2f30 [ 110.624080][ T4955] do_filp_open+0x1b3/0x3e0 [ 110.629841][ T4955] do_sys_openat2+0x142/0x4a0 [ 110.635181][ T4955] __x64_sys_openat+0x135/0x160 [ 110.640747][ T4955] do_syscall_64+0x4c/0xa0 [ 110.645776][ T4955] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 110.652570][ T4955] [ 110.652570][ T4955] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 110.661113][ T4955] down_read+0x44/0x2e0 [ 110.666108][ T4955] v2_read_dquot+0x4a/0x110 [ 110.671521][ T4955] dquot_acquire+0x152/0x520 [ 110.676953][ T4955] ext4_acquire_dquot+0x2d9/0x4a0 [ 110.682691][ T4955] dqget+0x778/0xeb0 [ 110.687264][ T4955] __dquot_initialize+0x328/0xcb0 [ 110.693033][ T4955] ext4_process_orphan+0x54/0x300 [ 110.698625][ T4955] ext4_orphan_cleanup+0xaa9/0x12e0 [ 110.704767][ T4955] ext4_fill_super+0x92f0/0x9a60 [ 110.710658][ T4955] mount_bdev+0x287/0x3c0 [ 110.715898][ T4955] legacy_get_tree+0xe6/0x180 [ 110.721222][ T4955] vfs_get_tree+0x88/0x270 [ 110.726198][ T4955] do_new_mount+0x24a/0xa40 [ 110.731542][ T4955] __se_sys_mount+0x2d6/0x3c0 [ 110.736784][ T4955] do_syscall_64+0x4c/0xa0 [ 110.741982][ T4955] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 110.748617][ T4955] [ 110.748617][ T4955] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 110.756398][ T4955] __lock_acquire+0x2c33/0x7c60 [ 110.762234][ T4955] lock_acquire+0x197/0x3f0 [ 110.767714][ T4955] __mutex_lock_common+0x1eb/0x2390 [ 110.773585][ T4955] mutex_lock_nested+0x17/0x20 [ 110.779147][ T4955] dquot_commit+0x5a/0x410 [ 110.784222][ T4955] ext4_write_dquot+0x1f0/0x360 [ 110.789984][ T4955] mark_all_dquot_dirty+0xf9/0x400 [ 110.795661][ T4955] __dquot_alloc_space+0x5d0/0xe20 [ 110.801339][ T4955] ext4_mb_new_blocks+0xf68/0x4940 [ 110.807230][ T4955] ext4_ext_map_blocks+0x146f/0x64e0 [ 110.813107][ T4955] ext4_map_blocks+0x981/0x1b30 [ 110.818715][ T4955] ext4_iomap_begin+0x807/0xb80 [ 110.824392][ T4955] iomap_iter+0x620/0xdb0 [ 110.829303][ T4955] __iomap_dio_rw+0xa69/0x1a70 [ 110.834645][ T4955] iomap_dio_rw+0x38/0x90 [ 110.839634][ T4955] ext4_file_write_iter+0x132b/0x17b0 [ 110.845937][ T4955] do_iter_readv_writev+0x497/0x600 [ 110.851916][ T4955] do_iter_write+0x205/0x7b0 [ 110.857229][ T4955] do_pwritev+0x204/0x340 [ 110.862317][ T4955] do_syscall_64+0x4c/0xa0 [ 110.867497][ T4955] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 110.874350][ T4955] [ 110.874350][ T4955] other info that might help us debug this: [ 110.874350][ T4955] [ 110.884957][ T4955] Chain exists of: [ 110.884957][ T4955] &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 110.884957][ T4955] [ 110.898761][ T4955] Possible unsafe locking scenario: [ 110.898761][ T4955] [ 110.906236][ T4955] CPU0 CPU1 [ 110.911751][ T4955] ---- ---- [ 110.917361][ T4955] lock(&ei->i_data_sem/2); [ 110.922086][ T4955] lock(&s->s_dquot.dqio_sem); [ 110.929917][ T4955] lock(&ei->i_data_sem/2); [ 110.937847][ T4955] lock(&dquot->dq_lock); [ 110.942533][ T4955] [ 110.942533][ T4955] *** DEADLOCK *** [ 110.942533][ T4955] [ 110.950712][ T4955] 4 locks held by syz.4.213/4955: [ 110.957064][ T4955] #0: ffff888076c54460 (sb_writers#5){.+.+}-{0:0}, at: do_pwritev+0x1f2/0x340 [ 110.966790][ T4955] #1: ffff88805ffe97e0 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: ext4_file_write_iter+0x6b2/0x17b0 [ 110.978760][ T4955] #2: ffff88805ffe9668 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x8b2/0x1b30 [ 110.989785][ T4955] #3: ffffffff8c23ef98 (dquot_srcu){....}-{0:0}, at: rcu_lock_acquire+0x5/0x30 [ 110.999109][ T4955] [ 110.999109][ T4955] stack backtrace: [ 111.005279][ T4955] CPU: 1 PID: 4955 Comm: syz.4.213 Not tainted syzkaller #0 [ 111.012677][ T4955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 111.022865][ T4955] Call Trace: [ 111.026184][ T4955] [ 111.029139][ T4955] dump_stack_lvl+0x168/0x230 [ 111.033848][ T4955] ? load_image+0x3b0/0x3b0 [ 111.038555][ T4955] ? show_regs_print_info+0x20/0x20 [ 111.044064][ T4955] ? print_circular_bug+0x12b/0x1a0 [ 111.049474][ T4955] check_noncircular+0x274/0x310 [ 111.054847][ T4955] ? add_chain_block+0x940/0x940 [ 111.060072][ T4955] ? lockdep_lock+0xdc/0x1e0 [ 111.064703][ T4955] ? mark_lock+0x94/0x320 [ 111.069249][ T4955] __lock_acquire+0x2c33/0x7c60 [ 111.074314][ T4955] ? hlock_conflict+0x59/0x1f0 [ 111.079289][ T4955] ? check_noncircular+0x16f/0x310 [ 111.084589][ T4955] ? add_chain_block+0x940/0x940 [ 111.089731][ T4955] ? lockdep_lock+0xdc/0x1e0 [ 111.094813][ T4955] ? verify_lock_unused+0x140/0x140 [ 111.100132][ T4955] ? lockdep_unlock+0x134/0x2d0 [ 111.105194][ T4955] ? lockdep_lock+0x1e0/0x1e0 [ 111.110188][ T4955] ? check_noncircular+0x16f/0x310 [ 111.115531][ T4955] ? mark_lock+0x94/0x320 [ 111.120061][ T4955] ? __lock_acquire+0x13ad/0x7c60 [ 111.125126][ T4955] lock_acquire+0x197/0x3f0 [ 111.129861][ T4955] ? dquot_commit+0x5a/0x410 [ 111.134462][ T4955] ? __might_sleep+0xf0/0xf0 [ 111.139146][ T4955] ? read_lock_is_recursive+0x10/0x10 [ 111.144589][ T4955] ? dquot_commit+0x5a/0x410 [ 111.149221][ T4955] __mutex_lock_common+0x1eb/0x2390 [ 111.154539][ T4955] ? dquot_commit+0x5a/0x410 [ 111.159185][ T4955] ? __might_sleep+0xf0/0xf0 [ 111.163845][ T4955] ? mutex_lock_io_nested+0x60/0x60 [ 111.169242][ T4955] mutex_lock_nested+0x17/0x20 [ 111.174112][ T4955] dquot_commit+0x5a/0x410 [ 111.178651][ T4955] ? __ext4_journal_start_sb+0x1bd/0x360 [ 111.184519][ T4955] ext4_write_dquot+0x1f0/0x360 [ 111.189421][ T4955] mark_all_dquot_dirty+0xf9/0x400 [ 111.194884][ T4955] __dquot_alloc_space+0x5d0/0xe20 [ 111.200303][ T4955] ext4_mb_new_blocks+0xf68/0x4940 [ 111.205466][ T4955] ? ext4_mb_pa_callback+0xd0/0xd0 [ 111.210880][ T4955] ? ext4_ext_check_overlap+0x15f/0x560 [ 111.216635][ T4955] ? ext4_inode_to_goal_block+0x313/0x450 [ 111.222568][ T4955] ext4_ext_map_blocks+0x146f/0x64e0 [ 111.227994][ T4955] ? ext4_ext_release+0x10/0x10 [ 111.233435][ T4955] ? rwsem_write_trylock+0x12f/0x1b0 [ 111.239402][ T4955] ext4_map_blocks+0x981/0x1b30 [ 111.244382][ T4955] ? __might_sleep+0xf0/0xf0 [ 111.249190][ T4955] ? ext4_issue_zeroout+0x250/0x250 [ 111.254417][ T4955] ? invalidate_inode_pages2_range+0xe35/0xfe0 [ 111.261114][ T4955] ? ext4_journal_check_start+0x180/0x250 [ 111.267090][ T4955] ? __ext4_journal_start_sb+0x1bd/0x360 [ 111.272767][ T4955] ext4_iomap_begin+0x807/0xb80 [ 111.277735][ T4955] ? do_pwritev+0x204/0x340 [ 111.283170][ T4955] ? do_syscall_64+0x4c/0xa0 [ 111.287797][ T4955] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 111.294115][ T4955] ? ext4_alloc_da_blocks+0x230/0x230 [ 111.299617][ T4955] ? xas_next_entry+0x3d0/0x3d0 [ 111.304694][ T4955] ? ext4_alloc_da_blocks+0x230/0x230 [ 111.310220][ T4955] iomap_iter+0x620/0xdb0 [ 111.314585][ T4955] __iomap_dio_rw+0xa69/0x1a70 [ 111.319820][ T4955] ? lock_chain_count+0x20/0x20 [ 111.324881][ T4955] ? iomap_dio_complete+0x6d0/0x6d0 [ 111.330668][ T4955] ? ext4_fc_replay_link_internal+0x280/0x280 [ 111.337190][ T4955] ? ext4_journal_check_start+0x180/0x250 [ 111.343108][ T4955] iomap_dio_rw+0x38/0x90 [ 111.347452][ T4955] ? ext4_file_write_iter+0xce1/0x17b0 [ 111.353024][ T4955] ext4_file_write_iter+0x132b/0x17b0 [ 111.358506][ T4955] ? ext4_file_write_iter+0xce1/0x17b0 [ 111.364353][ T4955] ? ext4_file_read_iter+0x700/0x700 [ 111.369820][ T4955] ? aa_file_perm+0x3a3/0xe20 [ 111.374624][ T4955] do_iter_readv_writev+0x497/0x600 [ 111.379963][ T4955] ? generic_file_rw_checks+0x280/0x280 [ 111.386242][ T4955] ? common_file_perm+0x171/0x1c0 [ 111.391485][ T4955] ? fsnotify_perm+0x5d/0x560 [ 111.396559][ T4955] ? security_file_permission+0x75/0xa0 [ 111.402313][ T4955] do_iter_write+0x205/0x7b0 [ 111.406918][ T4955] do_pwritev+0x204/0x340 [ 111.411265][ T4955] ? do_preadv+0x330/0x330 [ 111.415692][ T4955] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 111.421689][ T4955] ? lock_chain_count+0x20/0x20 [ 111.426776][ T4955] ? vtime_user_exit+0x2dc/0x400 [ 111.432131][ T4955] ? lockdep_hardirqs_on+0x94/0x140 [ 111.437701][ T4955] ? __x64_sys_pwritev2+0xba/0x100 [ 111.442843][ T4955] do_syscall_64+0x4c/0xa0 [ 111.447302][ T4955] ? clear_bhb_loop+0x30/0x80 [ 111.451989][ T4955] ? clear_bhb_loop+0x30/0x80 [ 111.456807][ T4955] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 111.462823][ T4955] RIP: 0033:0x7f23bd3f0fc9 [ 111.467277][ T4955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.487366][ T4955] RSP: 002b:00007f23bb658038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 111.495997][ T4955] RAX: ffffffffffffffda RBX: 00007f23bd647fa0 RCX: 00007f23bd3f0fc9 [ 111.504165][ T4955] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000009 [ 111.512436][ T4955] RBP: 00007f23bd473f91 R08: 0000000000000000 R09: 0000000000000003 [ 111.520610][ T4955] R10: 0000000000007000 R11: 0000000000000246 R12: 0000000000000000 [ 111.528852][ T4955] R13: 00007f23bd648038 R14: 00007f23bd647fa0 R15: 00007ffd7bd6bb78 [ 111.537254][ T4955] [ 111.572728][ T4961] fido_id[4961]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 111.610348][ T4955] netlink: 3 bytes leftover after parsing attributes in process `syz.4.213'. [ 111.620135][ T4955] 0ªX¹¦À: renamed from caif0 [ 111.629483][ T4955] chnl_net:chnl_net_open(): err: Unable to register and open device, Err:-19 [ 111.638800][ T4955] caif:caif_disconnect_client(): nothing to disconnect [ 111.648454][ T4955] chnl_net:chnl_flowctrl_cb(): NET flowctrl func called flow: CLOSE/DEINIT [ 111.657333][ T4955] chnl_net:chnl_net_open(): state disconnected [ 111.664061][ T4955] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check.