last executing test programs: 4.955144123s ago: executing program 2 (id=16): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) close_range(r0, 0xffffffffffffffff, 0x0) 4.323899677s ago: executing program 4 (id=24): syz_mount_image$ext4(&(0x7f0000002800)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000002880), 0x1, 0x5fd, &(0x7f0000002ec0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 4.28001638s ago: executing program 2 (id=25): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRES32=r0, @ANYBLOB="2a11390223bcb99d69615e8ff66e8aa3c1c0eb23fd1fd7366a95a8be846b0fa6ffefd1b7347324c3264ee502ed231f3e4e69aa52fe48972c72db9533d521039c503e45ce7db9195150b72e7420f51092998b44253fb42bd7616ae8e0157aeccb7eea3d3cf3bb52bb9b3f42cdac1fab4f80e1acc0e79cc8ea75030ec06623e53772202ae8da5fc56c", @ANYBLOB="614192f1a090cb6f9196ae1c957c4901ec894104d902b1807b2ccde90b54848efa6d40b9f88e461a48f26dafc34f0150547475fb42a4a7d050598cc920097c048a5a3c133b71e05a1fe2a5ed6f737fa18060c398f424223945d0050715814d4e49c57fd15a16cb01811934bcb64cdc04ba33defd9e78486209daa2ad6a8e81dc0a94025c54475894e4ca9a7ea9f9b3ade6edcf267e5a860acde01f00f1f4329e488e2972dd6c6bd9c7fb5c029a47c97baee43ed03ccd889dd03fc861788d7195332fcf418d7a1b4aa494aff6"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/3\x00') lseek(r3, 0x4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x19a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getqdisc={0x2c, 0x26, 0x20, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x4, 0x1}, {0x0, 0xa}, {0x7, 0x5}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048000}, 0x30000014) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e00", @ANYRES32], 0xb4}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x70c80, 0x181) rmdir(&(0x7f0000000000)='./file0\x00') r6 = open_tree(r5, &(0x7f0000000280)='\x00', 0x89901) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xc}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x3000000000000) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r4) sendmsg$GTP_CMD_ECHOREQ(r6, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000900)=ANY=[@ANYRES64=r2, @ANYRES16=r8, @ANYBLOB="040027bd7000fbdbdf25030000000c0003000400000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x80) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000100)=@req={0x4, 0x8, 0x0, 0x7fffffff}, 0x10) mmap(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x4, 0x13012, r9, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) clock_adjtime(0x0, &(0x7f00000006c0)={0x7ffe, 0x0, 0x2000000, 0x9, 0x4, 0x3, 0x0, 0x30bc, 0xffffffffffffffff, 0x0, 0x0, 0x2902, 0x0, 0x2, 0x0, 0x0, 0x2f0000000, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001, 0x100000000, 0x0, 0x0, 0x40000ef}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r7, 0x0, 0xfffffffffffffff4}, 0x18) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 4.017497873s ago: executing program 2 (id=29): socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x13, 0x3, &(0x7f0000000100)=@framed={{0x85, 0x0, 0x0, 0x0, 0x18, 0x4, 0x0, 0x0, 0x7fffffff}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x94) listen(r0, 0x3) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 3.769067755s ago: executing program 2 (id=31): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) io_setup(0x4, &(0x7f0000000600)=0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r3, &(0x7f0000000000)="ff", 0x1}]) 3.701228761s ago: executing program 4 (id=33): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x8) 3.437020443s ago: executing program 4 (id=36): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000039000900000000000000000001000000040000000c0001800600000005470000080002"], 0x38}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) 3.432356714s ago: executing program 2 (id=38): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x330, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7f, &(0x7f0000000940)=0x0) io_submit(r3, 0xfdef, &(0x7f00000002c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000080)="c3", 0x1}]) vmsplice(r2, &(0x7f0000000cc0)=[{&(0x7f0000000100)="03", 0x1}], 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c0000000800124000000000050005000a000000050004000000000010000300686173683a6970"], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x8, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@delchain={0x44, 0x65, 0x300, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0x4}, {0x8, 0xa}, {0x2, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0x6a, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xb, 0xa}}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0xd8}}]}, 0x44}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, 0x0, 0x0, 0x4) socket$inet6_sctp(0xa, 0x801, 0x84) 3.259353709s ago: executing program 4 (id=42): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ftruncate(0xffffffffffffffff, 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) 3.087766273s ago: executing program 4 (id=46): syz_usb_connect(0x3, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x7d, 0xa8, 0xe3, 0x40, 0xdba, 0x5000, 0x3d88, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x0, 0x10, [{{0x9, 0x4, 0x8c, 0x0, 0x0, 0x77, 0xb3, 0x6a}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000005c0)={r4, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r5 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88102) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001280)={r3, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r3) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r6, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="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", 0x1a8}], 0x1}}], 0x1, 0x400c0) sendto$inet(r6, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0xffffffffffffffff, 0x0) 3.01735952s ago: executing program 1 (id=47): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000080)={0x30, r3, 0x1, 0xfffffffe, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x30}}, 0x84) 2.828132586s ago: executing program 1 (id=49): r0 = inotify_init() io_uring_setup(0xf6a, &(0x7f0000000400)={0x0, 0x7a81, 0x400, 0x3, 0x3b1}) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000180)=""/79, 0x4f}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 2.505339684s ago: executing program 0 (id=56): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24040010}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r2}, 0x18) close(r0) 2.399905013s ago: executing program 0 (id=57): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2fdffbffb}, 0xc) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfe, 0x200000}, 0xc) 2.337074529s ago: executing program 0 (id=58): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x1, 0x0, &(0x7f0000000100)=0x53e999e7a9993618) 2.282446483s ago: executing program 0 (id=59): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x0, &(0x7f00000000c0)}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) pivot_root(&(0x7f0000000000)='.\x00', &(0x7f00000004c0)='./file1\x00') 2.172033613s ago: executing program 0 (id=60): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x2800810, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], 0x1, 0x15d, &(0x7f0000000f00)="$eJzs27+KE1EUB+AzJmrUJrVYDNhYBbWyVCSCOKAoKbRSiDaJBEwzWgWfxNaHEyRVCuGKzpLshoRl/8zO7ub7mhz4ccM9xZ3LGZj3dz6PhpPpp8mreXSyLNqPI49FFt24Eq2ozAIAuEwWKcXvlFK6PosbPyKl1PSOAIC6uf8BYPccev8/amhjAEBtzP8AsHvevH334klR9F/neSfi16wclIPqt8qfPS/69/P/uqtV87IctJb5gyrPD+ZX4+Ze/nBjfi3u3a3yf9nTl8VafiuG9bcPAAAAO6GXL22c73u9bXlV7Xs/sDa/t+N2+8zaAACOYPr12+jDePzxi0JxQYs/KaVjLP/+szoC56SL0y2yiDjZ/zT9ZALqtjr0Te8EAAAAAAAAAAAAAADYpt6vkVpNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb/Q0AAP//LjxONw==") r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffc) 2.056660413s ago: executing program 2 (id=62): syz_usb_disconnect(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x8001}, 0x18) epoll_create1(0x80000) socket$inet6_sctp(0xa, 0x801, 0x84) socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect$cdc_ncm(0x0, 0xf3, &(0x7f0000000200)=ANY=[], 0x0) close(0xffffffffffffffff) socket(0x28, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4, 0xffffffffffffffff}, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="140000001000010049429bf2000000000500000a20000000000a03000000000000000000070000040900010073797a300000000078000000090a010400000000000000000700000808000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d34001280300001800e000100636f6e6e6c696d69740000001c00028008000140003000000800024000000000080001400000000308000340000001", @ANYRES8=r5], 0xc0}}, 0x4008000) 1.986886169s ago: executing program 1 (id=63): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000000c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@abort}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000020018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="fe67c90dd69e0323116f4d1d4102dc97a7626f1fc25fed2196b5acc0e3dd0b8d02c59475f2c52903b54dd94028a2fb64d0cd28c03381aad129f86d4fc1af4dea8f8addfc0590303a5c4d8af2538f6350650400000034a0bb46c9e7e3bc94f5e6334c608612a4846e1023d9b7c5c2c11e9e007a4846e9a089617cd834a6e4b16cb53fcf93d0df3e0d17ed112ba96dde5f2f853d7ca092a2082e334f3369ee0bd3"], 0x1c}}, 0x4000054) sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000051}, 0x4008804) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) setsockopt$inet_int(r5, 0x0, 0xb, &(0x7f0000000000)=0x1ff, 0x4) sendto$inet(r5, 0x0, 0xffef, 0x20000000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_int(r5, 0x0, 0xb, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.883510807s ago: executing program 0 (id=65): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x8001}, 0x18) syz_usb_connect$cdc_ncm(0x0, 0xf3, &(0x7f0000000200)=ANY=[], 0x0) 535.725414ms ago: executing program 3 (id=74): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd30, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee11, 0x3, 0x0, 0x3], [0x0, 0x8, 0x3]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4c8c5}, 0x0) 507.712527ms ago: executing program 3 (id=75): r0 = io_uring_setup(0x3eac, &(0x7f0000000240)={0x0, 0xdb60, 0x40, 0x0, 0x12f}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000480)=[@ioring_restriction_sqe_flags_allowed={0x2, 0x11}], 0x1) 400.913476ms ago: executing program 1 (id=76): ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000480), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) 344.014771ms ago: executing program 3 (id=77): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x200000000}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) r3 = syz_clone(0x4000, &(0x7f0000001000), 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0)=r3, 0x12) 314.346143ms ago: executing program 3 (id=78): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r0}, &(0x7f0000000980), &(0x7f0000000a40)=r1}, 0x20) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x3}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) 254.862618ms ago: executing program 1 (id=79): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x21, &(0x7f0000000100), &(0x7f0000000140)=0x4) 153.442367ms ago: executing program 3 (id=80): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8e95}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000001640)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, r0, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb7}, 0x94) 149.496617ms ago: executing program 1 (id=81): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001540)={0x0, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 130.059659ms ago: executing program 3 (id=82): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x9, 0x1, 0x3, 0x0, @vifc_lcl_addr=@local, @loopback}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x1, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 0s ago: executing program 4 (id=83): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.66' (ED25519) to the list of known hosts. [ 53.166786][ T4171] cgroup: Unknown subsys name 'net' [ 53.301890][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 54.672105][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 56.694050][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 56.748445][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 56.777444][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 56.844691][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 56.871446][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 56.919821][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.927175][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.934933][ T4195] device bridge_slave_0 entered promiscuous mode [ 56.970974][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.981479][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.989376][ T4195] device bridge_slave_1 entered promiscuous mode [ 57.009317][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.016517][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.024507][ T4190] device bridge_slave_0 entered promiscuous mode [ 57.045924][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.053167][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.061534][ T4182] device bridge_slave_0 entered promiscuous mode [ 57.069226][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.076714][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.084577][ T4190] device bridge_slave_1 entered promiscuous mode [ 57.105152][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.112428][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.120281][ T4182] device bridge_slave_1 entered promiscuous mode [ 57.136082][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.180799][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.191609][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.210014][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.217262][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.225019][ T4189] device bridge_slave_0 entered promiscuous mode [ 57.241795][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.256404][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.263466][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.271613][ T4181] device bridge_slave_0 entered promiscuous mode [ 57.279564][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.286903][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.294828][ T4189] device bridge_slave_1 entered promiscuous mode [ 57.303455][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.325803][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.332966][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.341197][ T4181] device bridge_slave_1 entered promiscuous mode [ 57.355610][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.379855][ T4195] team0: Port device team_slave_0 added [ 57.387600][ T4190] team0: Port device team_slave_0 added [ 57.403153][ T4190] team0: Port device team_slave_1 added [ 57.421743][ T4195] team0: Port device team_slave_1 added [ 57.441610][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.452591][ T4182] team0: Port device team_slave_0 added [ 57.472254][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.484089][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.500758][ T4182] team0: Port device team_slave_1 added [ 57.520845][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.527956][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.554301][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.567557][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.590271][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.597449][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.623610][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.634981][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.642152][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.668232][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.687376][ T4189] team0: Port device team_slave_0 added [ 57.701201][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.708204][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.734406][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.746788][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.753744][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.780320][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.801997][ T4189] team0: Port device team_slave_1 added [ 57.809687][ T4181] team0: Port device team_slave_0 added [ 57.823866][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.830956][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.857630][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.883914][ T4181] team0: Port device team_slave_1 added [ 57.920019][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.927310][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.953307][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.974147][ T4190] device hsr_slave_0 entered promiscuous mode [ 57.981512][ T4190] device hsr_slave_1 entered promiscuous mode [ 58.008786][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.015734][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.042123][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.055322][ T4195] device hsr_slave_0 entered promiscuous mode [ 58.062381][ T4195] device hsr_slave_1 entered promiscuous mode [ 58.069158][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.077083][ T4195] Cannot create hsr debugfs directory [ 58.083231][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.090370][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.116381][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.130781][ T4182] device hsr_slave_0 entered promiscuous mode [ 58.137563][ T4182] device hsr_slave_1 entered promiscuous mode [ 58.143988][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.152215][ T4182] Cannot create hsr debugfs directory [ 58.162817][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.170053][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.196334][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.277773][ T4189] device hsr_slave_0 entered promiscuous mode [ 58.284479][ T4189] device hsr_slave_1 entered promiscuous mode [ 58.291467][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.299103][ T4189] Cannot create hsr debugfs directory [ 58.320760][ T4181] device hsr_slave_0 entered promiscuous mode [ 58.327815][ T4181] device hsr_slave_1 entered promiscuous mode [ 58.334403][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.342094][ T4181] Cannot create hsr debugfs directory [ 58.426402][ T4183] Bluetooth: hci4: command 0x0409 tx timeout [ 58.433282][ T4183] Bluetooth: hci2: command 0x0409 tx timeout [ 58.455306][ T4183] Bluetooth: hci0: command 0x0409 tx timeout [ 58.461609][ T4183] Bluetooth: hci1: command 0x0409 tx timeout [ 58.506520][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 58.630114][ T4195] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.639878][ T4195] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.655314][ T4195] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.669021][ T4195] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.702206][ T4190] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.717678][ T4190] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.727095][ T4190] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.737116][ T4190] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.781703][ T4189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.798059][ T4189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.812804][ T4189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.821920][ T4189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.898042][ T4181] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.910654][ T4181] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.920756][ T4181] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.931118][ T4181] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.971715][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.990140][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.018695][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.029837][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.059535][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.068816][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.079145][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.086429][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.094781][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.104254][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.112822][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.119909][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.127737][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.136491][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.147054][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.176543][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.194929][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.212794][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.221749][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.229935][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.240821][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.250112][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.257208][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.267189][ T4182] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.278714][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.290460][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.302782][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.310879][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.322298][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.330981][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.340214][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.348964][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.357355][ T4182] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.367752][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.377195][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.385619][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.392720][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.407106][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.424256][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.432979][ T4182] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.442713][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.451374][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.459938][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.469657][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.478473][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.488791][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.496622][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.504262][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.521675][ T4182] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.533979][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.544359][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.553358][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.560447][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.569038][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.578164][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.587402][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.595917][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.605594][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.614342][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.623722][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.630841][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.639270][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.647443][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.655262][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.668551][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.677403][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.685825][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.695396][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.705911][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.713109][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.721791][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.730752][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.739583][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.746692][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.755049][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.802017][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.811660][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.824649][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.833670][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.842404][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.851956][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.861197][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.869647][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.878364][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.887148][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.895378][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.904128][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.913721][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.926762][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.935094][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.965125][ T4189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.979496][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.004741][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.020491][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.033326][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.045592][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.054529][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.063777][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.072654][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.081296][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.090441][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.099606][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.108112][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.153710][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.164229][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.220667][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.260755][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.275801][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.299093][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.316571][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.325578][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.350548][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.357676][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.381303][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.440782][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.449852][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.459889][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.467017][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.475221][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.484585][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.496612][ T4256] Bluetooth: hci1: command 0x041b tx timeout [ 60.502659][ T4256] Bluetooth: hci0: command 0x041b tx timeout [ 60.503816][ T4253] Bluetooth: hci4: command 0x041b tx timeout [ 60.526494][ T4256] Bluetooth: hci2: command 0x041b tx timeout [ 60.542751][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.552283][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.562075][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.571624][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.580316][ T4253] Bluetooth: hci3: command 0x041b tx timeout [ 60.583874][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.593990][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.602334][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.610773][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.619364][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.628283][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.637169][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.644559][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.652332][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.660529][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.668861][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.682943][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.692599][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.701813][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.717517][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.745969][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.761655][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.771779][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.784601][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.799133][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.858030][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.868277][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.880540][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.889207][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.899678][ T4189] device veth0_vlan entered promiscuous mode [ 60.912740][ T4189] device veth1_vlan entered promiscuous mode [ 60.936166][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.944061][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.974717][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.000474][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.021170][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.043513][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.054444][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.077741][ T4181] device veth0_vlan entered promiscuous mode [ 61.089688][ T4190] device veth0_vlan entered promiscuous mode [ 61.105826][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.115537][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.123947][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.133431][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.142707][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.158107][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.165553][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.183743][ T4181] device veth1_vlan entered promiscuous mode [ 61.202022][ T4189] device veth0_macvtap entered promiscuous mode [ 61.209590][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.218316][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.225973][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.235428][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.244136][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.258433][ T4190] device veth1_vlan entered promiscuous mode [ 61.284879][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.293317][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.303348][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.311478][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.320172][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.328822][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.337715][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.362366][ T4189] device veth1_macvtap entered promiscuous mode [ 61.372833][ T4181] device veth0_macvtap entered promiscuous mode [ 61.380501][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.389674][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.398250][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.406512][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.415071][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.427688][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.435868][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.455912][ T4190] device veth0_macvtap entered promiscuous mode [ 61.472143][ T4190] device veth1_macvtap entered promiscuous mode [ 61.479829][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.487888][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.495518][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.505032][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.514030][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.522255][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.530907][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.542054][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.550642][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.559987][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.568542][ T4182] device veth0_vlan entered promiscuous mode [ 61.578678][ T4181] device veth1_macvtap entered promiscuous mode [ 61.590446][ T4195] device veth0_vlan entered promiscuous mode [ 61.605649][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.617742][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.627742][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.640756][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.652296][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.665309][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.676645][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.688359][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.695704][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.707033][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.715676][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.725274][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.734038][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.743009][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.751865][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.760638][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.769113][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.782212][ T4182] device veth1_vlan entered promiscuous mode [ 61.793663][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.803027][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.812685][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.821837][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.835602][ T4195] device veth1_vlan entered promiscuous mode [ 61.844585][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.854475][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.863934][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.873245][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.901502][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.912646][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.923717][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.934566][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.945949][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.957442][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.968090][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.979048][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.989724][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.000790][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.016546][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.024478][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.035263][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.044840][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.053979][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.062900][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.072193][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.115937][ T4181] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.125900][ T4181] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.137180][ T4181] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.146019][ T4181] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.170814][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.183856][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.219680][ T4195] device veth0_macvtap entered promiscuous mode [ 62.233959][ T4182] device veth0_macvtap entered promiscuous mode [ 62.255513][ T4182] device veth1_macvtap entered promiscuous mode [ 62.267283][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.277429][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.286028][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.295311][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.304079][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.314784][ T4195] device veth1_macvtap entered promiscuous mode [ 62.339054][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.353997][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.371075][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.380893][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.421445][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.424164][ T4265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.442763][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.447495][ T4265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.459850][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.460317][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.480893][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.491379][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.502837][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.513226][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.524489][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.534379][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.545356][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.555404][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.566749][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.577099][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 62.578967][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.583287][ T23] Bluetooth: hci4: command 0x040f tx timeout [ 62.599962][ T23] Bluetooth: hci0: command 0x040f tx timeout [ 62.605768][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.606118][ T23] Bluetooth: hci1: command 0x040f tx timeout [ 62.624308][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.639876][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.652084][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.658436][ T23] Bluetooth: hci3: command 0x040f tx timeout [ 62.666596][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.675146][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.684405][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.697893][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.708457][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.718603][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.729236][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.742634][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.753400][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.765135][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.780775][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.789846][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.802003][ T4265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.806922][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.820072][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.828249][ T4265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.830971][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.845833][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.861078][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.871755][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.882456][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.894152][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.904943][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.915432][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.925538][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.936013][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.947737][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.956977][ T4182] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.965697][ T4182] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.974631][ T4182] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.984684][ T4182] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.006718][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.015431][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.038476][ T4195] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.052710][ T4195] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.064630][ T4195] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.079835][ T4195] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.139151][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.147809][ T4265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.155736][ T4265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.196781][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.215394][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.229963][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.317980][ T4265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.335881][ T4265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.345346][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.436719][ T4265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.452237][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.452976][ T4265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.476531][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.492087][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.555013][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.633329][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.647436][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.663376][ T4309] loop0: detected capacity change from 0 to 512 [ 63.683698][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.698073][ T4307] loop2: detected capacity change from 0 to 4096 [ 63.764382][ T4309] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 63.803423][ T4309] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 63.821434][ T4307] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 63.921196][ T4307] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 63.952851][ T4320] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 63.999381][ T4309] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 64.074983][ T4309] EXT4-fs (loop0): 1 truncate cleaned up [ 64.131978][ T4309] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 64.298308][ T4326] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12'. [ 64.393718][ T4326] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12'. [ 64.430984][ T4326] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12'. [ 64.452271][ T4326] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12'. [ 64.559850][ T26] audit: type=1326 audit(1767997937.219:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4332 comm="syz.0.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7610cae749 code=0x7ffc0000 [ 64.610184][ T26] audit: type=1326 audit(1767997937.219:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4332 comm="syz.0.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f7610cae749 code=0x7ffc0000 [ 64.658187][ T4232] Bluetooth: hci1: command 0x0419 tx timeout [ 64.664582][ T4232] Bluetooth: hci0: command 0x0419 tx timeout [ 64.675864][ T4232] Bluetooth: hci4: command 0x0419 tx timeout [ 64.679250][ T26] audit: type=1326 audit(1767997937.219:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4332 comm="syz.0.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7610cae749 code=0x7ffc0000 [ 64.717866][ T4232] Bluetooth: hci2: command 0x0419 tx timeout [ 64.742435][ T4232] Bluetooth: hci3: command 0x0419 tx timeout [ 64.826728][ T26] audit: type=1326 audit(1767997937.279:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4332 comm="syz.0.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7610cae749 code=0x7ffc0000 [ 64.882309][ T4344] syz.0.20[4344] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.882396][ T4344] syz.0.20[4344] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 65.067206][ T4349] serio: Serial port ttyS3 [ 65.238608][ T26] audit: type=1326 audit(1767997937.899:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4354 comm="syz.2.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b14c2749 code=0x7ffc0000 [ 65.258706][ T4358] loop0: detected capacity change from 0 to 512 [ 65.285076][ T4356] netlink: 16 bytes leftover after parsing attributes in process `syz.2.25'. [ 65.304261][ T4360] loop4: detected capacity change from 0 to 1024 [ 65.311317][ T26] audit: type=1326 audit(1767997937.919:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4354 comm="syz.2.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b14c2749 code=0x7ffc0000 [ 65.333959][ T4356] netlink: 116 bytes leftover after parsing attributes in process `syz.2.25'. [ 65.342943][ T26] audit: type=1326 audit(1767997937.929:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4354 comm="syz.2.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99b14c2749 code=0x7ffc0000 [ 65.365190][ T4356] Zero length message leads to an empty skb [ 65.375872][ T26] audit: type=1326 audit(1767997937.929:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4354 comm="syz.2.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b14c2749 code=0x7ffc0000 [ 65.415596][ T4358] EXT4-fs (loop0): Ignoring removed oldalloc option [ 65.450671][ T4360] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.24: bad orphan inode 134217728 [ 65.450889][ T4358] EXT4-fs (loop0): 1 truncate cleaned up [ 65.481627][ T4360] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 65.500339][ T26] audit: type=1326 audit(1767997937.929:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4354 comm="syz.2.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b14c2749 code=0x7ffc0000 [ 65.536223][ T4358] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 65.725789][ T26] audit: type=1326 audit(1767997937.939:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4354 comm="syz.2.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99b14c2749 code=0x7ffc0000 [ 65.755463][ T4371] netlink: 12 bytes leftover after parsing attributes in process `syz.3.30'. [ 65.828749][ T4371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.30'. [ 65.867061][ T4371] netlink: 4 bytes leftover after parsing attributes in process `syz.3.30'. [ 65.879974][ T4371] device erspan0 entered promiscuous mode [ 65.887191][ T4371] device macsec1 entered promiscuous mode [ 65.915713][ T4380] loop0: detected capacity change from 0 to 164 [ 66.012750][ T4383] netlink: 12 bytes leftover after parsing attributes in process `syz.4.36'. [ 66.049530][ T4383] device  entered promiscuous mode [ 66.457770][ T4408] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 66.728914][ T13] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 66.981368][ T4444] loop3: detected capacity change from 0 to 1024 [ 67.040185][ T4444] EXT4-fs (loop3): Ignoring removed bh option [ 67.094352][ T4444] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,barrier,barrier=0x0000000000000002,dioread_lock,grpquota,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,barrier,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 67.119143][ T13] usb 5-1: config 1 has an invalid interface number: 140 but max is 0 [ 67.135195][ T13] usb 5-1: config 1 has no interface number 0 [ 67.189696][ T13] usb 5-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=3d.88 [ 67.242947][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.287620][ T4457] loop0: detected capacity change from 0 to 128 [ 68.365899][ T4232] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 68.536162][ T4481] loop1: detected capacity change from 0 to 1024 [ 68.549559][ T4481] ======================================================= [ 68.549559][ T4481] WARNING: The mand mount option has been deprecated and [ 68.549559][ T4481] and is ignored by this kernel. Remove the mand [ 68.549559][ T4481] option from the mount to silence this warning. [ 68.549559][ T4481] ======================================================= [ 68.556691][ T4232] usb 3-1: device descriptor read/64, error -71 [ 68.623085][ T4481] EXT4-fs (loop1): Ignoring removed bh option [ 68.641850][ T4481] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 68.665258][ T4481] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,abort,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 68.745535][ T4463] hub 9-0:1.0: USB hub found [ 68.754262][ T4463] hub 9-0:1.0: 1 port detected [ 68.759469][ T1109] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 68.870480][ T4232] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 68.946994][ T1109] usb 1-1: device descriptor read/64, error -71 [ 68.960992][ T1326] cfg80211: failed to load regulatory.db [ 69.051541][ T4232] usb 3-1: device descriptor read/64, error -71 [ 69.166362][ T4232] usb usb3-port1: attempt power cycle [ 69.222715][ T1109] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 69.401463][ T1326] usb 5-1: USB disconnect, device number 2 [ 69.413857][ T1109] usb 1-1: device descriptor read/64, error -71 [ 69.449192][ T4512] [ 69.457268][ T4512] ============================= [ 69.468724][ T4512] WARNING: suspicious RCU usage [ 69.478547][ T4512] syzkaller #0 Not tainted [ 69.483209][ T4512] ----------------------------- [ 69.488203][ T4512] include/linux/rhashtable.h:594 suspicious rcu_dereference_check() usage! [ 69.498174][ T4512] [ 69.498174][ T4512] other info that might help us debug this: [ 69.498174][ T4512] [ 69.514495][ T4512] [ 69.514495][ T4512] rcu_scheduler_active = 2, debug_locks = 1 [ 69.523173][ T4512] 1 lock held by syz.3.82/4512: [ 69.543057][ T1109] usb usb1-port1: attempt power cycle [ 69.564543][ T4512] #0: ffffffff8d232788 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x105/0x11a0 [ 69.601690][ T4512] [ 69.601690][ T4512] stack backtrace: [ 69.608443][ T4512] CPU: 1 PID: 4512 Comm: syz.3.82 Not tainted syzkaller #0 [ 69.615663][ T4512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 69.625755][ T4512] Call Trace: [ 69.629054][ T4512] [ 69.632007][ T4512] dump_stack_lvl+0x168/0x230 [ 69.636709][ T4512] ? load_image+0x3b0/0x3b0 [ 69.641257][ T4512] ? show_regs_print_info+0x20/0x20 [ 69.646494][ T4512] ? lockdep_rcu_suspicious+0x110/0x180 [ 69.652067][ T4512] ? local_bh_enable+0x20/0x20 [ 69.656867][ T4512] rhltable_lookup+0x77b/0x790 [ 69.661679][ T4512] ? mr_mfc_find_parent+0x190/0x190 [ 69.666904][ T4512] ? mark_lock+0x94/0x320 [ 69.671267][ T4512] ? local_bh_enable+0x20/0x20 [ 69.676058][ T4512] ? mark_lock+0x94/0x320 [ 69.680421][ T4512] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 69.686435][ T4512] ? lock_chain_count+0x20/0x20 [ 69.691317][ T4512] mr_mfc_find_any_parent+0xb6/0x1e0 [ 69.696628][ T4512] ? local_bh_enable+0x20/0x20 [ 69.701422][ T4512] ip_mr_forward+0x24c/0xf90 [ 69.706058][ T4512] ipmr_mfc_add+0x2466/0x2eb0 [ 69.710773][ T4512] ? ipmr_mfc_delete+0x5c0/0x5c0 [ 69.715740][ T4512] ? __lock_acquire+0x7c60/0x7c60 [ 69.720822][ T4512] ip_mroute_setsockopt+0xe33/0x11a0 [ 69.726139][ T4512] ? ipmr_rule_default+0x70/0x70 [ 69.731145][ T4512] ? __might_sleep+0xf0/0xf0 [ 69.735755][ T4512] ip_setsockopt+0x4ad/0x3070 [ 69.740485][ T4512] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 69.745884][ T4512] ? aa_sk_perm+0x7b4/0x8f0 [ 69.750413][ T4512] ? aa_af_perm+0x2b0/0x2b0 [ 69.754945][ T4512] ? __fget_files+0x40f/0x480 [ 69.759652][ T4512] ? aa_sock_opt_perm+0x74/0x100 [ 69.764612][ T4512] ? sock_common_setsockopt+0x32/0xb0 [ 69.770009][ T4512] ? raw_setsockopt+0xc5/0x180 [ 69.774808][ T4512] ? sock_common_recvmsg+0x1b0/0x1b0 [ 69.780134][ T4512] __sys_setsockopt+0x2bf/0x3d0 [ 69.785006][ T4512] __x64_sys_setsockopt+0xb1/0xc0 [ 69.790051][ T4512] do_syscall_64+0x4c/0xa0 [ 69.794497][ T4512] ? clear_bhb_loop+0x30/0x80 [ 69.799185][ T4512] ? clear_bhb_loop+0x30/0x80 [ 69.803887][ T4512] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 69.809809][ T4512] RIP: 0033:0x7f0ca5c82749 [ 69.814239][ T4512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.833861][ T4512] RSP: 002b:00007f0ca3ee9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 69.842298][ T4512] RAX: ffffffffffffffda RBX: 00007f0ca5ed8fa0 RCX: 00007f0ca5c82749 [ 69.850288][ T4512] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000005 [ 69.858272][ T4512] RBP: 00007f0ca5d06f91 R08: 000000000000003c R09: 0000000000000000 [ 69.866267][ T4512] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 69.874257][ T4512] R13: 00007f0ca5ed9038 R14: 00007f0ca5ed8fa0 R15: 00007fff7a0f5028 [ 69.882261][ T4512] [ 69.888277][ T4232] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 69.905075][ T4512] [ 69.907490][ T4512] ============================= [ 69.912766][ T4512] WARNING: suspicious RCU usage [ 69.918021][ T4512] syzkaller #0 Not tainted [ 69.922525][ T4512] ----------------------------- [ 69.927395][ T4512] include/linux/rhashtable.h:369 suspicious rcu_dereference_check() usage! [ 69.936472][ T4512] [ 69.936472][ T4512] other info that might help us debug this: [ 69.936472][ T4512] [ 69.947490][ T4512] [ 69.947490][ T4512] rcu_scheduler_active = 2, debug_locks = 1 [ 69.955568][ T4512] 1 lock held by syz.3.82/4512: [ 69.965614][ T4512] #0: ffffffff8d232788 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x105/0x11a0 [ 69.980581][ T4512] [ 69.980581][ T4512] stack backtrace: [ 69.986850][ T4232] usb 3-1: device descriptor read/8, error -71 [ 69.994066][ T4512] CPU: 1 PID: 4512 Comm: syz.3.82 Not tainted syzkaller #0 [ 70.001280][ T4512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 70.011361][ T4512] Call Trace: [ 70.014649][ T4512] [ 70.017595][ T4512] dump_stack_lvl+0x168/0x230 [ 70.022295][ T4512] ? load_image+0x3b0/0x3b0 [ 70.026823][ T4512] ? show_regs_print_info+0x20/0x20 [ 70.032059][ T4512] ? lockdep_rcu_suspicious+0x110/0x180 [ 70.037617][ T4512] ? local_bh_enable+0x20/0x20 [ 70.042401][ T4512] rhltable_lookup+0x504/0x790 [ 70.047192][ T4512] ? local_bh_enable+0x20/0x20 [ 70.051983][ T4512] ? mr_mfc_find_parent+0x190/0x190 [ 70.057196][ T4512] ? mark_lock+0x94/0x320 [ 70.061554][ T4512] ? local_bh_enable+0x20/0x20 [ 70.066343][ T4512] ? mark_lock+0x94/0x320 [ 70.070708][ T4512] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 70.076717][ T4512] ? lock_chain_count+0x20/0x20 [ 70.081597][ T4512] mr_mfc_find_any_parent+0xb6/0x1e0 [ 70.086904][ T4512] ? local_bh_enable+0x20/0x20 [ 70.091703][ T4512] ip_mr_forward+0x24c/0xf90 [ 70.096333][ T4512] ipmr_mfc_add+0x2466/0x2eb0 [ 70.101053][ T4512] ? ipmr_mfc_delete+0x5c0/0x5c0 [ 70.106032][ T4512] ? __lock_acquire+0x7c60/0x7c60 [ 70.111115][ T4512] ip_mroute_setsockopt+0xe33/0x11a0 [ 70.116441][ T4512] ? ipmr_rule_default+0x70/0x70 [ 70.121428][ T4512] ? __might_sleep+0xf0/0xf0 [ 70.126046][ T4512] ip_setsockopt+0x4ad/0x3070 [ 70.130759][ T4512] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 70.136183][ T4512] ? aa_sk_perm+0x7b4/0x8f0 [ 70.140718][ T4512] ? aa_af_perm+0x2b0/0x2b0 [ 70.145241][ T4512] ? __fget_files+0x40f/0x480 [ 70.149941][ T4512] ? aa_sock_opt_perm+0x74/0x100 [ 70.154901][ T4512] ? sock_common_setsockopt+0x32/0xb0 [ 70.160293][ T4512] ? raw_setsockopt+0xc5/0x180 [ 70.165108][ T4512] ? sock_common_recvmsg+0x1b0/0x1b0 [ 70.170419][ T4512] __sys_setsockopt+0x2bf/0x3d0 [ 70.175302][ T4512] __x64_sys_setsockopt+0xb1/0xc0 [ 70.180357][ T4512] do_syscall_64+0x4c/0xa0 [ 70.184790][ T4512] ? clear_bhb_loop+0x30/0x80 [ 70.189488][ T4512] ? clear_bhb_loop+0x30/0x80 [ 70.194183][ T4512] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 70.200094][ T4512] RIP: 0033:0x7f0ca5c82749 [ 70.204531][ T4512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.224150][ T4512] RSP: 002b:00007f0ca3ee9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 70.232573][ T4512] RAX: ffffffffffffffda RBX: 00007f0ca5ed8fa0 RCX: 00007f0ca5c82749 [ 70.240559][ T4512] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000005 [ 70.248555][ T4512] RBP: 00007f0ca5d06f91 R08: 000000000000003c R09: 0000000000000000 [ 70.256544][ T4512] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 70.264539][ T4512] R13: 00007f0ca5ed9038 R14: 00007f0ca5ed8fa0 R15: 00007fff7a0f5028 [ 70.272649][ T4512] [ 70.291421][ T4512] [ 70.293794][ T4512] ============================= [ 70.305090][ T4512] WARNING: suspicious RCU usage [ 70.310360][ T4512] syzkaller #0 Not tainted [ 70.314784][ T4512] ----------------------------- [ 70.324783][ T4512] include/linux/rhashtable.h:614 suspicious rcu_dereference_check() usage! [ 70.343702][ T4512] [ 70.343702][ T4512] other info that might help us debug this: [ 70.343702][ T4512] [ 70.354472][ T1109] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 70.367263][ T4512] [ 70.367263][ T4512] rcu_scheduler_active = 2, debug_locks = 1 [ 70.379082][ T4512] 1 lock held by syz.3.82/4512: [ 70.388076][ T4512] #0: ffffffff8d232788 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x105/0x11a0 [ 70.403068][ T4512] [ 70.403068][ T4512] stack backtrace: [ 70.426035][ T4512] CPU: 1 PID: 4512 Comm: syz.3.82 Not tainted syzkaller #0 [ 70.433266][ T4512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 70.443354][ T4512] Call Trace: [ 70.446654][ T4512] [ 70.449611][ T4512] dump_stack_lvl+0x168/0x230 [ 70.454320][ T4512] ? load_image+0x3b0/0x3b0 [ 70.458855][ T4512] ? show_regs_print_info+0x20/0x20 [ 70.464103][ T4512] ? lockdep_rcu_suspicious+0x110/0x180 [ 70.469682][ T4512] ? local_bh_enable+0x20/0x20 [ 70.474473][ T4512] rhltable_lookup+0x5f8/0x790 [ 70.479272][ T4512] ? local_bh_enable+0x20/0x20 [ 70.484058][ T4512] ? mr_mfc_find_parent+0x190/0x190 [ 70.489278][ T4512] ? mark_lock+0x94/0x320 [ 70.493637][ T4512] ? local_bh_enable+0x20/0x20 [ 70.498429][ T4512] ? mark_lock+0x94/0x320 [ 70.502786][ T4512] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 70.508798][ T4512] ? lock_chain_count+0x20/0x20 [ 70.513675][ T4512] mr_mfc_find_any_parent+0xb6/0x1e0 [ 70.518996][ T4512] ? local_bh_enable+0x20/0x20 [ 70.523814][ T4512] ip_mr_forward+0x24c/0xf90 [ 70.528449][ T4512] ipmr_mfc_add+0x2466/0x2eb0 [ 70.533162][ T4512] ? ipmr_mfc_delete+0x5c0/0x5c0 [ 70.538121][ T4512] ? __lock_acquire+0x7c60/0x7c60 [ 70.543199][ T4512] ip_mroute_setsockopt+0xe33/0x11a0 [ 70.548515][ T4512] ? ipmr_rule_default+0x70/0x70 [ 70.553486][ T4512] ? __might_sleep+0xf0/0xf0 [ 70.558092][ T4512] ip_setsockopt+0x4ad/0x3070 [ 70.562794][ T4512] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 70.568208][ T4512] ? aa_sk_perm+0x7b4/0x8f0 [ 70.572736][ T4512] ? aa_af_perm+0x2b0/0x2b0 [ 70.577439][ T4512] ? __fget_files+0x40f/0x480 [ 70.582141][ T4512] ? aa_sock_opt_perm+0x74/0x100 [ 70.587104][ T4512] ? sock_common_setsockopt+0x32/0xb0 [ 70.592503][ T4512] ? raw_setsockopt+0xc5/0x180 [ 70.597283][ T4512] ? sock_common_recvmsg+0x1b0/0x1b0 [ 70.602606][ T4512] __sys_setsockopt+0x2bf/0x3d0 [ 70.607480][ T4512] __x64_sys_setsockopt+0xb1/0xc0 [ 70.612515][ T4512] do_syscall_64+0x4c/0xa0 [ 70.616946][ T4512] ? clear_bhb_loop+0x30/0x80 [ 70.621646][ T4512] ? clear_bhb_loop+0x30/0x80 [ 70.626350][ T4512] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 70.632270][ T4512] RIP: 0033:0x7f0ca5c82749 [ 70.636703][ T4512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.656422][ T4512] RSP: 002b:00007f0ca3ee9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 70.664858][ T4512] RAX: ffffffffffffffda RBX: 00007f0ca5ed8fa0 RCX: 00007f0ca5c82749 [ 70.672849][ T4512] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000005 [ 70.680843][ T4512] RBP: 00007f0ca5d06f91 R08: 000000000000003c R09: 0000000000000000 [ 70.688833][ T4512] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 70.696825][ T4512] R13: 00007f0ca5ed9038 R14: 00007f0ca5ed8fa0 R15: 00007fff7a0f5028 [ 70.704849][ T4512] [ 70.708945][ T1109] usb 1-1: device descriptor read/8, error -71 [ 70.789682][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.797238][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.965326][ T1109] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 71.060433][ T1109] usb 1-1: device descriptor read/8, error -71 [ 71.177113][ T1109] usb usb1-port1: unable to enumerate USB device